Lucene search
+L

715 matches found

FreeBSD
FreeBSD
•added 2025/03/27 12:00 a.m.•36 views

electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2025-2783...

8.3CVSS7.4AI score0.09238EPSS
SaveExploits7References1
CISA KEV Catalog
CISA KEV Catalog
•added 2025/03/27 12:00 a.m.•77 views

Google Chromium Mojo Sandbox Escape Vulnerability

Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google...

8.3CVSS8.2AI score0.09238EPSS
SaveIn wildExploits7
OSV
OSV
•added 2025/03/26 4:15 p.m.•9 views

CVE-2025-2783

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High...

8.3CVSS7.6AI score0.09238EPSS
SaveExploits7References3
EUVD
EUVD
•added 2025/03/26 4:07 p.m.•14 views

EUVD-2025-8225

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High...

8.3CVSS8.8AI score0.09238EPSS
SaveExploits7References3
Mend
Mend
•added 2025/03/26 4:07 p.m.•4 views

CVE-2025-2783

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High...

9CVSS0.09238EPSS
SaveExploits7References4
Debian CVE
Debian CVE
•added 2025/03/26 4:07 p.m.•38 views

CVE-2025-2783

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High...

8.3CVSS8.3AI score0.09238EPSS
SaveExploits7
CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•14 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a sandbox escape vulnerability that stems from mishandling of a Mojo component resulting in a sandbox escape. An attacker can exploit this vulnerability to bypass the sandboxing system and execute arbitrar...

8.3CVSS7.7AI score0.09238EPSS
SaveExploits7References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•1 views

CVE-2025-2783: Undefined Security Weakness

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. Chromium security severity: High...

8.3CVSS8.2AI score0.09238EPSS
SaveExploits7References1
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•14 views

The vulnerability of the Mojo component of the Google Chrome browser for Windows operating systems allows a hacker to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the Mojo component of the Google Chrome browser for Windows operating systems is related to improper handling of descriptors. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions and execute arbitrary code by sending a specially...

10CVSS8.2AI score0.09238EPSS
SaveExploits7References9Affected Software3
VulnCheck KEV
VulnCheck KEV
•added 2025/03/25 12:00 a.m.•7 views

VulnCheck KEV: CVE-2025-2783

Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google...

8.3CVSS7.9AI score0.09238EPSS
SaveIn wildExploits7References21
Snyk
Snyk
•added 2025/03/24 10:00 p.m.•13 views

Improper Isolation or Compartmentalization

Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization that allows an attacker who can convince a user to follow a malicious link to escape sandbox protections, due to a logic error in the Mojo component. This vulnerability does not enable code...

8.3CVSS7.6AI score0.09238EPSS
SaveExploits7References2
Snyk
Snyk
•added 2025/03/24 10:00 p.m.•15 views

Improper Isolation or Compartmentalization

Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization that allows an attacker who can convince a user to follow a malicious link to escape sandbox protections, due to a logic error in the Mojo component. This vulnerability does not enable code...

8.3CVSS7.6AI score0.09238EPSS
SaveExploits7References2
Snyk
Snyk
•added 2025/03/24 10:00 p.m.•19 views

Improper Isolation or Compartmentalization

Overview CefSharp.WinForms is a the CefSharp Chromium-based browser component WinForms control. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization that allows an attacker who can convince a user to follow a malicious link to escape sandbox protections,...

8.3CVSS7.6AI score0.09238EPSS
SaveExploits7References2
RedhatCVE
RedhatCVE
•added 2025/03/05 3:02 p.m.•16 views

CVE-2025-23850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/03 2:15 p.m.•14 views

CVE-2025-23850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...

7.1CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•3 views

CVE-2025-23850 WordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•61 views

CVE-2025-23850

The CVE-2025-23850 entry describes a Reflected XSS in the WordPress plugin Mojo Under Construction, affecting versions up to 1.1.2. Root cause: improper neutralization of input during web page generation (input handling leading to reflected script execution). Impact is reflected XSS with low to m...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•11 views

WordPress plugin Mojo Under Construction 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•2 views

PT-2025-9415

Name of the Vulnerable Software and Affected Versions Mojo Under Construction versions 1.1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 1.1.2...

7.1CVSS0.00393EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•4 views

CVE-2025-23850: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Rows per page
Query Builder