6367 matches found
DEBIAN-CVE-2024-7966
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2024-7966
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2024-7966
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2024-7966
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
kernel: vmwgfx: use-after-free in vmw_cmd_res_check
A use-after-free vulnerability was found in the Linux kernel's vmwgfx driver in vmwcmdrescheck. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl on the resulting file descriptor, to crash the system, causing a...
kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c
An integer overflow was found in the Linux kernel's vmwgfx driver. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, and able to issue an ioctl on the resulting file descriptor to crash the system, causing a denial of service...
DEBIAN-CVE-2023-4860
Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts
Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...
CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts
Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...
CVE-2024-38527 Cross-site Scripting in ZenUML
ZenUML is JavaScript-based diagramming tool that requires no server, using Markdown-inspired text definitions and a renderer to create and modify sequence diagrams. Markdown-based comments in the ZenUML diagram syntax are susceptible to Cross-site Scripting XSS. The comment feature allows the use...
Malicious code in liquid-renderer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6958 Malicious code in liquid-renderer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3109 Malicious code in test-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2297 Malicious code in en-conduit-electron-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3841 Malicious code in @expue/vue3-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @expue/vue3-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @expue/vue-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
