Lucene search
K

27 matches found

EUVD
EUVD
added 18 hours ago4 views

EUVD-2026-34433

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.8AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-11232

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

5.8AI score
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-46513

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.8AI score
Exploits0References3
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Input components after they were released, potentially allowing remote attackers to exploit certain...

7.5CVSS5.8AI score0.00118EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/06 9:31 p.m.1 views

EUVD-2026-28133

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00073EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/21 1:28 a.m.1 views

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

9.8CVSS6.1AI score0.00389EPSS
Exploits1References1
NVD
NVD
added 2026/02/19 9:18 p.m.4 views

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

9.8CVSS0.00389EPSS
Exploits1References2
CVE
CVE
added 2026/02/19 8:43 p.m.12 views

CVE-2026-27476

RustFly 2.0.0 is affected by a command-injection vulnerability in its remote UI control that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. The flaw allows an attacker to send crafted hex payloads to execute arbitrary commands on the target, potentially enabling ...

9.8CVSS6.2AI score0.00389EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.4 views

PT-2026-20937

Name of the Vulnerable Software and Affected Versions RustFly version 2.0.0 Description RustFly 2.0.0 contains a command injection issue in its remote UI control mechanism. The software accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted...

9.8CVSS6AI score0.00389EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/11 6:8 p.m.1 views

CVE-2026-2323

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.6AI score0.00011EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/14 2:29 a.m.1 views

CVE-2024-7021

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.1AI score0.00062EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/05/29 2:12 a.m.1 views

SUSE CVE-2025-5067

Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS6.5AI score0.00054EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to perform UI spoofing via a crafted Chrome extension...

4.3CVSS6.5AI score0.00129EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:51 a.m.1 views

SUSE CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS8.6AI score0.00667EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/01/02 12:0 a.m.2 views

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome prior to version 104.0.5112.79 suffers from a Competitive Condition Issue vulnerability that stems from the presence of post-release reuse in Exosphere, which allows remote attackers to convince a user to engage ...

8.8CVSS8AI score0.00303EPSS
Exploits1References3
OSV
OSV
added 2022/06/20 7:27 a.m.4 views

MAL-2022-5747 Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Exploit DB
Exploit DB
added 2018/06/06 12:0 a.m.72 views

Canon MF210/MF220 - Authenticaton Bypass

Canon MF210/MF220 - Authenticaton Bypass. CVE-2018-11711. Webapps exploit for Hardware platform Exploit Title: Incorrect Access Control in Canon MF210 & MF220 Series Date: 4.6.2018 Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Software Link: Website Version: MF210 & MF20 Series...

10CVSS9.7AI score0.06293EPSS
Exploits3
OSV
OSV
added 2017/10/27 5:29 a.m.0 views

UBUNTU-CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS6.7AI score0.00667EPSS
Exploits0References3
NVD
NVD
added 2015/09/11 4:59 p.m.11 views

CVE-2015-5631

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

6.8CVSS7.2AI score0.00126EPSS
Exploits0References3
Prion
Prion
added 2015/09/11 4:59 p.m.14 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

6.8CVSS7.7AI score0.00126EPSS
Exploits0References3
Rows per page
Query Builder