Lucene search
+L

701 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/16 12:0 a.m.7 views

The vulnerability of the Thumbnail Tab Strip component of the Google Chrome browser, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Thumbnail Tab Strip component in Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

7.6CVSS7AI score0.00719EPSS
SaveExploits0References10Affected Software6
OSV
OSV
added 2022/02/11 6:15 p.m.6 views

UBUNTU-CVE-2022-0561

Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712...

5.5CVSS6.6AI score0.0125EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
added 2022/02/02 2:3 a.m.24 views

Chromium: CVE-2022-0458 Use after free in Thumbnail Tab Strip

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00719EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.12 views

The vulnerability of Google Chrome’s Tab Strip component, related to the use of memory after it is freed, allows a hacker to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s Tab Strip component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions through a specially created HTML page...

8.8CVSS7.6AI score0.01222EPSS
SaveExploits0References11Affected Software8
NVD
NVD
added 2021/11/30 9:15 p.m.23 views

CVE-2021-36326

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...

6.5CVSS0.01181EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/30 9:15 p.m.4 views

CVE-2021-36326

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...

6.5CVSS6.7AI score0.01181EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/30 9:15 p.m.21 views

Format string

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...

4.3CVSS6.4AI score0.01181EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/11/30 8:40 p.m.51 views

CVE-2021-36326

CVE-2021-36326: Dell EMC Streaming Data Platform versions prior to 1.3 expose an SSL Strip vulnerability in the UI, enabling a remote unauthenticated attacker to downgrade client–server communications to an unencrypted form. Affected component: UI for streaming data platform; root cause: unencryp...

6.5CVSS6.4AI score0.01181EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/30 8:40 p.m.27 views

CVE-2021-36326

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...

6.5CVSS6.6AI score0.01181EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2021/11/15 12:0 a.m.59 views

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2021:1475-1 Rating: moderate References: 1179898 1179899 1179900 1179901 1179902 1179903 1180451 1180454 1180461 1181452 1182252 1183511 1183909 1184519 1184620 1184794 1188941 1191473 1192267 PM-2767 SLE-18637...

7CVSS7.5AI score0.03412EPSS
SaveExploits12References23
RedHat Linux
RedHat Linux
added 2021/11/09 6:20 p.m.4 views

binutils: Race window allows users to own arbitrary files

There is an open race window when writing output in the following utilities in GNU binutils1: ar, objcopy, strip, and ranlib. When these utilities are run as a privileged user presumably as part of a script updating binaries across different users, an unprivileged user can trick these utilities...

6.3CVSS7.4AI score0.00304EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.6 views

The vulnerability of the Tab Strip component in the Google Chrome web browser, related to memory usage after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Tab Strip component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

8.8CVSS7.6AI score0.00881EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.6 views

The vulnerability of the Tab Strip component in the Google Chrome web browser involves reading data beyond the allowed buffer size. This allows attackers to access confidential data and also trigger a service failure.

The vulnerability of the Tab Strip component in the Google Chrome web browser is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service interruptions through the use of a...

8.1CVSS6.7AI score0.01948EPSS
SaveExploits1References7Affected Software3
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:0 a.m.68 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1339-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1339-1 advisory. - Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the rendere...

9.6CVSS7.5AI score0.34887EPSS
SaveExploits4References44
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/12 12:0 a.m.59 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1350-1 Rating: important References: 1190765 1191166 1191204 1191463 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963...

9.6CVSS9.2AI score0.34887EPSS
SaveExploits5References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/11 12:0 a.m.51 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1339-1 Rating: important References: 1190765 1191166 1191204 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963...

9.6CVSS8.8AI score0.34887EPSS
SaveExploits4References3
OSV
OSV
added 2021/10/08 10:15 p.m.2 views

DEBIAN-CVE-2021-37961

Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.01222EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/08 10:15 p.m.27 views

Design/Logic Flaw

Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS9AI score0.01222EPSS
SaveExploits0References5Affected Software3
UbuntuCve
UbuntuCve
added 2021/10/08 10:15 p.m.34 views

CVE-2021-37961

Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01222EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/08 10:15 p.m.4 views

UBUNTU-CVE-2021-37961

Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01222EPSS
SaveExploits0References2
Rows per page
Query Builder