3597 matches found
PT-2022-5905
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.124 Description The issue is related to a use after free in the Profiles component of Google Chrome, which can be exploited by a remote attacker to potentially corrupt the heap via a crafted HTML page...
Google Chrome < 108.0.5359.125 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.125. It is, therefore, affected by multiple vulnerabilities as referenced in the 202212stable-channel-update-for-desktop13 advisory. - Use after free in Blink Media. CVE-2022-4436 - Use after free in Mojo IPC...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome Mac and Linux versions prior to 108.0.5359.124, and Windows versions prior to 108.0.5359.125, which stems from a post-release reuse vulnerability in Profiles...
Google Chrome < 108.0.5359.124 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.124. It is, therefore, affected by multiple vulnerabilities as referenced in the 202212stable-channel-update-for-desktop13 advisory. - Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed...
KLA20125 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Blink Frames can be exploited to cause denial of service or...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 8 security fixes, including: 1383991 High CVE-2022-4436: Use after free in Blink Media. Reported by Anonymous on 2022-11-15 1394692 High CVE-2022-4437: Use after free in Mojo IPC. Reported by koocola@alocook and Guang Gong of 360 Vulnerability Resear...
PT-2022-6296 · Апекс-Вуз · Апекс-Вуз
Name of the Vulnerable Software and Affected Versions: Апекс-ВУЗ affected versions not specified Description: The issue is related to insufficient access control in the web interface of the Апекс-ВУЗ education automation system. Exploitation of this issue may allow a remote attacker to gain acces...
CVE-2022-39913
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...
CVE-2022-39913
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...
Information disclosure
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...
CVE-2022-39913
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...
CVE-2022-44929
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
CVE-2022-44929
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
Design/Logic Flaw
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
CVE-2022-44929
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
CVE-2022-44929: Incorrect Default Permissions
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
PT-2022-27333 · D Link · D-Link Dvg-G5402Sp
Name of the Vulnerable Software and Affected Versions: D-Link DVG-G5402SP version GE 1.03 Description: An access control issue allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles. Recommendations: For D-Link DVG-G5402SP version GE 1.03, consider...
CVE-2022-44929
CVE-2022-44929 affects the D-Link DVG-G5402SP, GE 1.03. The issue is an access control flaw that allows unauthenticated attackers to escalate privileges by arbitrarily editing VoIP SIB profiles. Concrete data from connected documents show a high/critical impact (CVSS v3.1 base score 9.8) with net...
Google sues "harassing and deceptive" impersonator
After receiving many complaints, Google has announced it has filed a lawsuit against a company that has made it its business to impersonate Google. The company going by the name of "G Verifier" deployed telemarketing and website tactics that were intended to persuade people they were doing busine...
W4SP Stealer Constantly Targeting Python Developers in Ongoing Supply Chain Attack
An ongoing supply chain attack has been leveraging malicious Python packages to distribute malware called W4SP Stealer, with over hundreds of victims ensnared to date. "The threat actor is still active and is releasing more malicious packages," Checkmarx researcher Jossef Harush said in a technic...