Lucene search
+L

269 matches found

Microsoft CVE
Microsoft CVE
added 2022/08/05 7:0 a.m.36 views

Chromium: CVE-2022-2618 Insufficient validation of untrusted input in Internals

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.0062EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/08/03 12:0 a.m.49 views

FreeBSD : chromium -- multiple vulnerabilities (96a41723-133a-11ed-be3b-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 96a41723-133a-11ed-be3b-3065ec8fd3ec advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 -...

8.8CVSS7.4AI score0.00815EPSS
Exploits3References24
Kaspersky
Kaspersky
added 2022/08/02 12:0 a.m.493 views

KLA12600 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of boun...

8.8CVSS10AI score0.00815EPSS
Exploits6References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:15 p.m.6 views

Malicious code in jest-utils-lwc-internals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c648c3492e79706f76e42a3e0ee3bf0d79e36fc2996157477622d919419e8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:15 p.m.6 views

MAL-2022-4016 Malicious code in jest-utils-lwc-internals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c648c3492e79706f76e42a3e0ee3bf0d79e36fc2996157477622d919419e8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/05/20 10:38 p.m.32 views

CVE-2021-21173

Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS2.9AI score0.01603EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/04/26 12:0 a.m.4 views

PT-2022-6775 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 101.0.4951.41 Description: The issue is related to a use after free in Base Internals, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can be exploited by a remote...

10CVSS6.8AI score0.0105EPSS
Exploits25References97
RedHat Linux
RedHat Linux
added 2022/04/05 3:11 p.m.7 views

kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c

A flaw was found in the Linux kernel’s virtual console resize functionality. An attacker with local access to virtual consoles can use the virtual console resizing code to gather kernel internal data structures...

6.1CVSS6.9AI score0.00413EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.6 views

Aternity SteelCentral AppInternals 路径遍历漏洞

Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. It provides application performance monitoring APM and diagnostics. Aternity SteelCentral AppInternals Dynamic Sampling Agent DSA A security vulnerability exists in the AgentConfigurationServlet that...

9.8CVSS8.4AI score0.01308EPSS
Exploits0References2
Veracode
Veracode
added 2022/02/14 10:31 a.m.41 views

Arbitrary Code Execution

vm2 is vulnerable to arbitrary code execution. Remote attackers are able to inject and execute crafted malicious scripts on the host machine via direct access to host error objects generated by node internals during generation of a stacktraces...

9.8CVSS5.8AI score0.02876EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/02/12 12:0 a.m.5 views

GHSA-6PW2-5HJV-9PF7 Sandbox bypass in vm2

The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine...

9.8CVSS7.6AI score0.02876EPSS
Exploits1References4
OSV
OSV
added 2022/02/11 8:15 p.m.26 views

CVE-2021-23555

The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine...

9.8CVSS9.6AI score
Exploits0References2
Snyk
Snyk
added 2021/12/06 11:32 a.m.4 views

Sandbox Bypass

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of...

10CVSS7.5AI score0.02876EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2021/09/26 12:0 a.m.46 views

openSUSE 15 Security Update : opera (openSUSE-SU-2021:1310-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1310-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

8.8CVSS8AI score0.0559EPSS
Exploits1References39
Tenable Nessus
Tenable Nessus
added 2021/09/23 12:0 a.m.41 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1303-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1303-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

9.6CVSS7.9AI score0.64546EPSS
Exploits4References57
NVD
NVD
added 2021/09/03 8:15 p.m.14 views

CVE-2021-30613

Chromium: CVE-2021-30613 Use after free in Base internals...

8.8CVSS0.04125EPSS
Exploits0References2
OSV
OSV
added 2021/09/03 8:15 p.m.0 views

DEBIAN-CVE-2021-30613

Chromium: CVE-2021-30613 Use after free in Base internals...

8.8CVSS8.2AI score0.04125EPSS
Exploits0References1
Prion
Prion
added 2021/09/03 8:15 p.m.25 views

Design/Logic Flaw

Chromium: CVE-2021-30613 Use after free in Base internals...

6.8CVSS8.8AI score0.04125EPSS
Exploits0References2Affected Software3
OSV
OSV
added 2021/09/03 8:15 p.m.3 views

UBUNTU-CVE-2021-30613

Chromium: CVE-2021-30613 Use after free in Base internals...

8.8CVSS7.2AI score0.04125EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/09/03 7:25 p.m.26 views

CVE-2021-30613

Chromium: CVE-2021-30613 Use after free in Base internals...

9.6AI score0.04125EPSS
Exploits0References2
Rows per page
Query Builder