Lucene search
+L

2751 matches found

OSV
OSV
added 2022/04/05 12:15 a.m.3 views

DEBIAN-CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.4AI score0.00655EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/05 12:15 a.m.22 views

CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00655EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/05 12:15 a.m.5 views

UBUNTU-CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.5AI score0.00655EPSS
SaveExploits0References3
Prion
Prion
added 2022/04/05 12:15 a.m.30 views

Heap overflow

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.7AI score0.00655EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/04/05 12:15 a.m.63 views

CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.00655EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2022/04/04 11:55 p.m.58 views

CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.00655EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/04/04 11:55 p.m.28 views

CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.9AI score0.00655EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/04/04 11:55 p.m.60 views

CVE-2022-0604

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.00655EPSS
SaveExploits0
CVE
CVE
added 2022/04/04 11:55 p.m.227 views

CVE-2022-0604

CVE-2022-0604 is a heap buffer overflow in Chrome’s Tab Groups, affecting Chrome before 98.0.4758.102. Affected component is the Tab Groups feature; root cause is a heap overflow that could be triggered by a crafted HTML page after user interaction with a malicious extension. Practical impact per...

8.8CVSS8.6AI score0.00655EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2022/04/04 12:15 a.m.35 views

[SECURITY] Fedora 36 Update: fish-3.4.1-1.fc36

fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...

7.8CVSS1.1AI score0.01472EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2022/04/01 7:0 a.m.44 views

Chromium: CVE-2022-1136 Use after free in Tab Strip

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00606EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2022/04/01 12:0 a.m.58 views

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

8.8CVSS9.5AI score0.0179EPSS
SaveExploits15References27
zdt
zdt
added 2022/03/30 12:0 a.m.226 views

Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting Vulnerability

Exploit Title: Drupal avataruploader v7.x-1.0-beta8 - Cross Site Scripting XSS Author: Milad karimi Software Link: https://www.drupal.org/project/avataruploader Version: v7.x-1.0-beta8 Tested on: Windows 10 CVE: N/A 1. Description: This plugin creates a avataruploader from any post types. The...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2022/03/30 12:0 a.m.286 views

Drupal avatar_uploader v7.x-1.0-beta8 - Cross Site Scripting (XSS)

Exploit Title: Drupal avataruploader v7.x-1.0-beta8 - Cross Site Scripting XSS Date: 2022-03-22 Author: Milad karimi Software Link: https://www.drupal.org/project/avataruploader Version: v7.x-1.0-beta8 Tested on: Windows 10 CVE: N/A 1. Description: This plugin creates a avataruploader from any po...

5.3AI score
SaveExploits0
NVD
NVD
added 2022/03/29 2:15 a.m.22 views

CVE-2022-24957

DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will ...

5.4CVSS0.00705EPSS
SaveExploits1References2
Prion
Prion
added 2022/03/29 2:15 a.m.17 views

Input validation

DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will ...

3.5CVSS5.2AI score0.00705EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/29 1:11 a.m.33 views

CVE-2022-24957

DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will ...

5.4AI score0.00705EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that exists due to a post-release usage error in the Tab Strip in Google Chrome. A remote attacker could trick a victim into visitin...

8.8CVSS7.6AI score0.00606EPSS
SaveExploits1References9
OSV
OSV
added 2022/03/28 6:15 p.m.11 views

CVE-2022-0600

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/28 6:15 p.m.8 views

CVE-2022-0600

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
Rows per page
Query Builder