Lucene search
+L

7398 matches found

OSV
OSV
•added 2021/11/09 8:45 a.m.•38 views

ALSA-2021:4221 Moderate: container-tools:2.0 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 For more details about the security issues, including the impac...

5.5CVSS6.5AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/02 9:15 p.m.•4 views

DEBIAN-CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS7.8AI score0.01462EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/02 9:15 p.m.•23 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS0.01462EPSS
SaveExploits0References4
OSV
OSV
•added 2021/11/02 9:15 p.m.•17 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS8.8AI score
SaveExploits0References4
Prion
Prion
•added 2021/11/02 9:15 p.m.•42 views

Design/Logic Flaw

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

4.3CVSS7.3AI score0.01462EPSS
SaveExploits0References4Affected Software3
attackerkb
attackerkb
•added 2021/11/02 9:15 p.m.•12 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS7AI score0.01462EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/11/02 9:15 p.m.•119 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS7.1AI score0.01462EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/02 9:15 p.m.•8 views

UBUNTU-CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS7.1AI score0.01462EPSS
SaveExploits0References2
Mend
Mend
•added 2021/11/02 8:25 p.m.•1 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

8.3CVSS0.01462EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2021/11/02 8:25 p.m.•42 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.7AI score0.01462EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/11/02 8:25 p.m.•65 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS8.1AI score0.01462EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/11/02 8:25 p.m.•89 views

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS7.6AI score0.01462EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•3 views

CVE-2021-37980: Undefined Security Weakness

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

7.4CVSS5.6AI score0.01462EPSS
SaveExploits0References1
ICS
ICS
•added 2021/10/21 12:00 a.m.•77 views

ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendors: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64, Mitsubishi Electric MC Works64 Vulnerability: Uncontrolled Recursion 2. RISK EVALUATION Successful exploitation of this vulnerability could...

7.5CVSS7.8AI score0.0195EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/10/20 12:00 a.m.•18 views

The vulnerability of the AppContainer isolated programming environment in Microsoft Windows operating systems allows attackers to bypass the security mechanisms.

The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems is related to security flaws in its mechanisms. Exploiting this vulnerability could allow an attacker to bypass the security measures...

5.5CVSS6.7AI score0.03299EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/10/13 12:00 a.m.•31 views

The vulnerability of the Input Method Editor (IME) component in Windows operating systems, which allows a hacker to exploit their privileges

The vulnerability of the Input Method Editor IME component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by exiting from the isolated software environment using a specially created...

9.3CVSS5.4AI score0.54577EPSS
SaveExploits0References8
vulnersOsv
vulnersOsv
•added 2021/10/12 9:59 p.m.•6 views

0.edsql (>=1.0.49, <=1.0.50), 0.electron.main (>=1.0.49, <=1.0.50) +11 more potentially affected by CVE-2021-39184 via electron (>=12.0.2, <=12.0.18)

electron NPM version =12.0.2, =1.0.49, =1.0.49, =1.0.49, =0.21.4-alpha.0, =1.0.38, =0.3.314, =1.0.38, =1.0.37, =0.0.26, =2.0.23, =2.0.28 Source cves: CVE-2021-39184 Source advisory: OSV:GHSA-MPJM-V997-C4H4...

8.6CVSS8AI score0.0105EPSS
SaveExploits0
NVD
NVD
•added 2021/10/12 7:15 p.m.•44 views

CVE-2021-39184

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to 11.5.0, 12.1.0, and 13.3.0 allows a sandboxed renderer to request a "thumbnail" image of an arbitrary file on the user's system. The thumbnail can potential...

8.6CVSS0.0105EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/10/11 12:00 a.m.•91 views

Microsoft Edge (Chromium) < 94.0.992.47 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 94.0.992.47. It is, therefore, affected by multiple vulnerabilities as referenced in the October 11, 2021 advisory. - heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who...

8.8CVSS8AI score0.01767EPSS
SaveExploits1References9
NVD
NVD
•added 2021/10/08 10:15 p.m.•21 views

CVE-2021-37963

Side-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to bypass site isolation via a crafted HTML page...

4.3CVSS0.01153EPSS
SaveExploits0References5
Rows per page
Query Builder