Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 10:34 p.m.4 views

CVE-2026-7961

An insufficient validation of untrusted input flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497008295...

7.4CVSS5.7AI score0.00018EPSS
Exploits0References5
CNVD
CNVD
added 2026/04/16 12:0 a.m.0 views

Google Chrome Permissions Component Memory Misreference Vulnerability

Google Chrome on Android is an American web browser for Android by Google. A memory misreference vulnerability exists in the Google Chrome Permissions component, which can be exploited by an attacker to execute arbitrary code via specially crafted HTML pages...

8.8CVSS6AI score0.00045EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.4 views

Google Chrome on Android 安全漏洞

Google Chrome on Android is an American web browser for Android by Google. A memory misreference vulnerability exists in the Google Chrome Permissions component, which can be exploited by an attacker to execute arbitrary code via specially crafted HTML pages...

8.8CVSS6.2AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-1246

Malware in sbrugna...

6.8CVSS6.4AI score0.00815EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-16997

Malicious code in bioql PyPI...

5CVSS6.6AI score0.00164EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/07 2:6 p.m.8 views

CVE-2025-0691

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation...

5CVSS5AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2025/06/05 2:15 p.m.0 views

CVE-2025-0691

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation...

5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/06/05 2:15 p.m.10 views

CVE-2025-0691

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation...

5CVSS0.00164EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/05 12:0 a.m.3 views

PT-2025-23929 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2025.1.10.0 and earlier Description: The issue is related to improper access control in the permissions component, allowing an authenticated user to bypass the "Edit permission" permission. This is achieved by...

5CVSS6.1AI score0.00164EPSS
Exploits0References4
CNVD
CNVD
added 2020/08/11 12:0 a.m.2 views

Carson & SAINT SAINT Security Suite Cross-Site Scripting Vulnerability

Carson & SAINT SAINT Security Suite is the U.S. Carson & SAINT a set of vulnerability management, security configuration assessment, penetration testing and other functions of the security suite. A cross-site scripting vulnerability exists in the Permissions component of Carson & SAINT SAINT...

6.1CVSS6.4AI score0.00271EPSS
Exploits0References1
OSV
OSV
added 2020/08/10 11:15 p.m.0 views

CVE-2020-16278

A cross-site scripting XSS vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...

6.1CVSS6.4AI score
Exploits0References1
Prion
Prion
added 2020/08/10 11:15 p.m.8 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...

4.3CVSS5.8AI score0.00271EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/08/10 10:55 p.m.43 views

CVE-2020-16278

SAINT Security Suite, versions 8.0–9.8.20, contains a cross-site scripting (XSS) vulnerability in the Permissions component that could allow arbitrary script execution in a logged-in user’s context when a user clicks a specially crafted link. The root cause, per CNVD, is a lack of proper validati...

6.1CVSS5.9AI score0.00271EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/10 10:55 p.m.10 views

CVE-2020-16278

A cross-site scripting XSS vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...

6AI score0.00271EPSS
Exploits0References1
Rows per page
Query Builder