Lucene search
+L

5253 matches found

Openbugbounty
Openbugbounty
added 2022/09/16 11:1 p.m.8 views

isolation-montbeliard-ibrahmen.fr Cross Site Scripting vulnerability OBB-2928584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Veracode
Veracode
added 2022/09/16 7:25 p.m.20 views

Cross-site Scripting (XSS)

chrome is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the renderer process allowing an attacker to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00867EPSS
SaveExploits0References6Affected Software2
Openbugbounty
Openbugbounty
added 2022/09/13 12:14 p.m.10 views

bochenek.net Cross Site Scripting vulnerability OBB-2917472

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/09/13 12:0 a.m.34 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10119-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10119-1 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039, CVE-2022-3041 - Use after free in Layout...

9.6CVSS7.9AI score0.24738EPSS
SaveExploits1References50
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.11 views

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

3.1CVSS6.7AI score0.00534EPSS
SaveExploits0References8Affected Software5
Tenable Nessus
Tenable Nessus
added 2022/09/02 12:0 a.m.73 views

Microsoft Edge (Chromium) < 105.0.1343.25 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 105.0.1343.25. It is, therefore, affected by multiple vulnerabilities as referenced in the September 1, 2022 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039,...

8.8CVSS7.2AI score0.24738EPSS
SaveExploits1References31
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.11 views

The vulnerability of the site isolation function in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of site isolation functions in Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS7.1AI score0.00867EPSS
SaveExploits0References8Affected Software5
Tenable Nessus
Tenable Nessus
added 2022/09/02 12:0 a.m.51 views

Debian DSA-5223-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5223 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

8.8CVSS7.8AI score0.24738EPSS
SaveExploits1References48
OSV
OSV
added 2022/09/01 10:15 p.m.109 views

GHSA-XWF3-6RGV-939R Flux CLI Workload Injection

Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allows other applications to replace the Flux deployment information with arbitrary content which is deployed into the target Kubernetes cluster instead. The vulnerability is due to the...

7.7CVSS7.7AI score0.00308EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2022/09/01 4:4 p.m.32 views

Chromium: CVE-2022-3044 Inappropriate implementation in Site Isolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00867EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/09/01 12:0 a.m.40 views

Google Chrome Security Update (stable-channel-update-for-desktop_30-2022-08) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS7.8AI score0.24738EPSS
SaveExploits3References3
Kaspersky
Kaspersky
added 2022/09/01 12:0 a.m.46 views

KLA15734 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Pointer Lock can be exploited to cause denial of service...

8.8CVSS9.4AI score0.24738EPSS
SaveExploits1References18
Tenable Nessus
Tenable Nessus
added 2022/08/31 12:0 a.m.45 views

FreeBSD : chromium -- multiple vulnerabilities (f2043ff6-2916-11ed-a1ef-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f2043ff6-2916-11ed-a1ef-3065ec8fd3ec advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039,...

8.8CVSS7.8AI score0.24738EPSS
SaveExploits1References23
CNNVD
CNNVD
added 2022/08/30 12:0 a.m.12 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improper implementation issue in Site Isolation and affects the following products and versions: Chrome prior to 105.0.5195.52 Mac/linux and 105.0.5195.52/53/54 Windows...

6.5CVSS8.8AI score0.00867EPSS
SaveExploits0References9
Kaspersky
Kaspersky
added 2022/08/30 12:0 a.m.535 views

KLA15732 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Layout can be exploited to caus...

8.8CVSS9.7AI score0.24738EPSS
SaveExploits3References4
ATTACKERKB
ATTACKERKB
added 2022/08/25 8:15 p.m.12 views

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

8.8CVSS7.5AI score0.00237EPSS
SaveExploits0References6
NVD
NVD
added 2022/08/25 8:15 p.m.27 views

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

8.8CVSS0.00237EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/25 8:15 p.m.11 views

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

8.8CVSS7.7AI score0.00237EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/25 8:15 p.m.27 views

Default configuration

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

4.3CVSS8.4AI score0.00237EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2022/08/25 7:35 p.m.110 views

CVE-2021-4112

CVE-2021-4112 affects Red Hat Ansible Automation Platform (ansible-runner). The issue is described as a privilege escalation via job isolation escape that could elevate a low-privilege user to an AWX user from outside the isolated environment. Public details in connected documents identify the vu...

8.8CVSS8.2AI score0.00237EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder