312 matches found
CVE-2021-37975
Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Simple Social Networking Site SQL注入漏洞
Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /sns/admin/?page=user/manageuser&id=...
The vulnerability of the Elcomplus SmartPPT SCADA server, related to insufficient verification of the HTTP request source, allows a hacker to execute a CSRF attack.
The vulnerability of the Elcomplus SmartPPT SCADA server is related to insufficient security checks on the HTTP request source. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web page...
The vulnerability of Google Chrome’s storage mechanism allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s storage mechanism is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created web page...
The vulnerability of the Shopping Cart component in Google Chrome and Microsoft Edge browsers allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Shopping Cart component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...
The vulnerability of the software interface of the Background Fetch API in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Background Fetch API programming interface in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...
Microsoft Edge browser’s vulnerability, related to improper code generation management, allows attackers to escalate their privileges.
The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...
Microsoft Edge browser’s vulnerability, related to improper code generation management, allows attackers to escalate their privileges.
The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...
CVE-2022-0454
Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0606
Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-24365
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
The vulnerability of Google Chrome’s Payments component, which allows a hacker to access confidential information
The vulnerability of Google Chrome’s Payments component is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential information through a specially created web page...
The vulnerability of the Accessibility component in Google Chrome browser allows a perpetrator to access confidential information.
The vulnerability of the Accessibility component in Google Chrome browser relates to memory usage after deallocation. Exploiting this vulnerability could allow an attacker to access confidential information through a specially created web page...
CVE-2021-38011
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a denial-of-service attack through a specially created web...
The vulnerability of Windows operating system script handlers allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of Windows operating system script handlers is related to the operation of writing data beyond the buffer boundaries into memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...
The vulnerability of the Google Chrome browser’s media component, which allows a hacker to execute arbitrary code.
The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
Google Chrome post-release reuse vulnerability (CNVD-2022-12742)
Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Storage Foundation in Google Chrome versions prior to 96.0.4664.45. An attacker can potentially exploit heap corruption via a crafted HTML page...
BetterDocs 1.9.0-1.9.1 - Reflected Cross-Site Scripting
The plugin does not escape the daterange parameter before outputting it back in the All docs admin dashboard, leading to a Reflected Cross-Site Scripting issue https://example.com/wp-admin/admin.php?page=betterdocs-admin&daterange="alert/XSS/...
