Lucene search
+L

715 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/01/30 12:00 a.m.•10 views

Google Chrome AI Manager Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Mo...

7.5CVSS6.7AI score0.0529EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•14 views

WordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Mojo Under Construction versions = 1.1.2...

7.1CVSS6.1AI score0.00393EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/11/27 6:15 p.m.•50 views

CVE-2024-9369

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.0068EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/27 6:15 p.m.•7 views

DEBIAN-CVE-2024-9369

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

9.6CVSS8.4AI score0.0068EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/27 5:50 p.m.•38 views

CVE-2024-9369

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

0.0068EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/27 5:50 p.m.•194 views

CVE-2024-9369

CVE-2024-9369: Insufficient data validation in Mojo within Google Chrome (Chromium) allowed a remote attacker, who had compromised the renderer process, to perform an out-of-bounds memory write via a crafted HTML page. The issue is confirmed in Chrome/Chromium and has high impact. Public fix/upda...

9.6CVSS6.1AI score0.0068EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•2 views

CVE-2024-9369: Improper Validation of Specified Quantity in Input

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

9.6CVSS7.5AI score0.0068EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2024/11/23 3:04 a.m.•11 views

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write via a crafted HTML page. Chromium security severity: High...

9.6CVSS7.3AI score0.0068EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2024/10/30 12:00 a.m.•24 views

Mageia: Security Advisory (MGASA-2024-0341)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.3AI score0.00821EPSS
SaveExploits2References5
BDU FSTEC
BDU FSTEC
•added 2024/10/29 12:00 a.m.•20 views

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.7AI score0.0068EPSS
SaveExploits0References10Affected Software5
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•40 views

CentOS 6 : chromium-browser (RHSA-2020:3740)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3740 advisory. - Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to...

9.6CVSS7.1AI score0.01769EPSS
SaveExploits0References6
OSV
OSV
•added 2024/10/07 9:07 a.m.•16 views

OPENSUSE-SU-2024:0327-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 129.0.6668.89 stable released 2024-09-24 boo1231232 CVE-2024-7025: Integer overflow in Layout CVE-2024-9369: Insufficient data validation in Mojo CVE-2024-9370: Inappropriate implementation in V8...

9.6CVSS9.1AI score0.00687EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
•added 2024/10/03 10:14 p.m.•39 views

Chromium: CVE-2024-9369 Insufficient data validation in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS6.6AI score0.0068EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/10/03 3:05 a.m.•9 views

SUSE CVE-2024-9369

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.7AI score0.0068EPSS
SaveExploits0References5
Kaspersky
Kaspersky
•added 2024/10/03 12:00 a.m.•7 views

KLA73852 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in V8 can be exploited to cause denial of service. 2...

9.6CVSS5.7AI score0.00687EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/01 12:00 a.m.•3 views

PT-2024-7365

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.89 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in Mojo, allowing a remote attacker who has compromised the renderer process to...

9.6CVSS6AI score0.0068EPSS
SaveExploits0References55
Tenable Nessus
Tenable Nessus
•added 2024/10/01 12:00 a.m.•49 views

Google Chrome < 129.0.6668.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 129.0.6668.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202410stable-channel-update-for-desktop advisory. - This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests...

9.6CVSS8.4AI score0.00687EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2024/09/23 12:00 a.m.•20 views

The vulnerability of the Mojo components in Microsoft Edge and Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Mojo browser components in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially...

10CVSS7.8AI score0.23918EPSS
SaveExploits0References10Affected Software6
OSV
OSV
•added 2024/06/27 6:40 p.m.•16 views

CVE-2024-5979 Denial of Service via Invalid Argument in h2oai/h2o-3

In h2oai/h2o-3 version 3.46.0, the runtool command in the rapids component allows the main function of any class under the water.tools namespace to be called. One such class, MojoConvertTool, crashes the server when invoked with an invalid argument, causing a denial of service...

7.5CVSS7AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2024/06/27 12:00 a.m.•23 views

Pytorch-Lightning Code Issue Vulnerability

Pytorch-Lightning is an open source lightweight PyTorch wrapper open-sourced by Lightning AI in the US. Used for high performance Ai research. A code issue vulnerability exists in Pytorch-Lightning version v2.2.4, which stems from the runtool command in the rapids component that allows the main...

9.8CVSS7AI score0.01318EPSS
SaveExploits1References2
Rows per page
Query Builder