Lucene search
+L

33 matches found

OSV
OSV
•added 2022/06/20 9:13 p.m.•12 views

MAL-2022-7196 Malicious code in wm-jquery-shadow-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2016/03/13 10:59 p.m.•9 views

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

8.8CVSS7.4AI score0.02688EPSS
SaveExploits0References10
Prion
Prion
•added 2016/03/13 10:59 p.m.•30 views

Type confusion

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

9.3CVSS7.6AI score0.02688EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
•added 2016/03/13 10:00 p.m.•35 views

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

8.8AI score0.02688EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2016/03/10 7:06 a.m.•13 views

chromium-browser: type confusion in Blink

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

9.3CVSS7.5AI score0.02688EPSS
SaveExploits0References5
OSV
OSV
•added 2016/03/10 12:00 a.m.•11 views

UBUNTU-CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

8.8CVSS7.3AI score0.02688EPSS
SaveExploits0References3
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2014/05/20 12:00 a.m.•50 views

Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 35 to the Stable channel for Windows, Mac, and Linux. Chrome 35.0.1916.114 contains a number of fixes and improvements, including: More developer control over touch input New JavaScript features Unprefixed Shadow DOM A number of new...

7.5CVSS9AI score0.0197EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2010/06/15 6:00 p.m.•42 views

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS8.8AI score0.02981EPSS
SaveExploits0References7
Prion
Prion
•added 2010/06/15 6:00 p.m.•34 views

Design/Logic Flaw

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS8AI score0.06346EPSS
SaveExploits0References7Affected Software4
UbuntuCve
UbuntuCve
•added 2010/06/15 6:00 p.m.•32 views

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS5.9AI score0.02981EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2010/06/15 5:48 p.m.•47 views

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

8.8AI score0.02981EPSS
SaveExploits0References7
CVE
CVE
•added 2010/06/15 5:48 p.m.•106 views

CVE-2010-2302

CVE-2010-2302 is a use-after-free in WebKit’s WebCore affecting Google Chrome prior to 5.0.375.70. The flaw involves remote fonts used with shadow DOM trees and can cause memory corruption, leading to a denial of service or potential arbitrary code execution. Affected component: WebKit/WebCore in...

10CVSS8.7AI score0.02981EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/15 12:00 a.m.•3 views

CVE-2010-2302: Use After Free

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS6.5AI score0.02981EPSS
SaveExploits0References2
Rows per page
Query Builder