Lucene search
+L

1005 matches found

Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.52 views

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remot...

9.6CVSS7.6AI score0.19272EPSS
Exploits4References39
SUSE CVE
SUSE CVE
added 2024/08/08 2:35 a.m.4 views

SUSE CVE-2024-6997

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00549EPSS
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/07 11:58 p.m.5 views

Malicious code in uitk-react-experimental-button-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d35a0704d9415d237418973ea82b6c991e02af5b2381fc696268805ff39a30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/08/07 11:58 p.m.4 views

MAL-2024-8001 Malicious code in uitk-react-experimental-button-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d35a0704d9415d237418973ea82b6c991e02af5b2381fc696268805ff39a30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
NVD
NVD
added 2024/08/06 4:15 p.m.16 views

CVE-2024-6997

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS0.00549EPSS
Exploits0References2
OSV
OSV
added 2024/08/06 4:15 p.m.2 views

DEBIAN-CVE-2024-6997

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.8AI score0.00549EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2024/08/06 3:37 p.m.35 views

CVE-2024-6997

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.8AI score0.00549EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/08/06 3:37 p.m.20 views

CVE-2024-6997

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

7.2AI score0.00549EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/06 3:37 p.m.29 views

CVE-2024-6997

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

0.00549EPSS
Exploits0References2
CVE
CVE
added 2024/08/06 3:37 p.m.62 views

CVE-2024-6997

CVE-2024-6997 is a use-after-free in Chrome/Chromium Tabs prior to 127.0.6533.72, enabling heap corruption via a crafted HTML page when a user engages specific UI gestures. Affected product: Google Chrome/Chromium; root cause: use-after-free in tab handling; impact: remote code execution/compromi...

8.8CVSS7.2AI score0.00549EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.7 views

The vulnerability of the Tabs component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Tabs component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...

7.5CVSS7.5AI score0.00549EPSS
Exploits0References11Affected Software5
Patchstack
Patchstack
added 2024/07/30 6:39 a.m.7 views

WordPress Responsive Tabs plugin <= 4.0.8 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Krugov Aryom in WordPress Plugin Responsive Tabs versions = 4.0.8...

5.9CVSS6.1AI score0.0043EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2024/07/30 6:15 a.m.7 views

CVE-2024-4096

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks...

5.9CVSS5.8AI score0.0043EPSS
Exploits1References1
NVD
NVD
added 2024/07/30 6:15 a.m.26 views

CVE-2024-4096

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks...

5.9CVSS0.0043EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/07/30 6:0 a.m.12 views

CVE-2024-4096 Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks...

5.8AI score0.0043EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/07/30 6:0 a.m.27 views

CVE-2024-4096 Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks...

0.0043EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/07/30 12:0 a.m.12 views

PT-2024-29175 · WordPress · Responsive Tabs

Name of the Vulnerable Software and Affected Versions: Responsive Tabs WordPress plugin versions 4.0.8 and earlier Description: The issue allows high privilege users, such as Contributors and above, to perform Stored Cross-Site Scripting attacks due to the plugin not sanitizing and escaping some ...

5.9CVSS5.4AI score0.0043EPSS
Exploits1References6
Patchstack
Patchstack
added 2024/07/30 12:0 a.m.12 views

WordPress Responsive Tabs Plugin <= 4.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Tabs Type Plugin Vulnerable versions = 4.0.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4096 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d75c9df585a3 Credits Krugov Aryom Required...

5.9CVSS5.8AI score0.0043EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.5 views

WordPress plugin Responsive Tabs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.9CVSS6.7AI score0.0043EPSS
Exploits1References2
OSV
OSV
added 2024/07/29 11:15 p.m.16 views

CVE-2024-40794

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication...

5.3CVSS5.7AI score
Exploits0References10
Rows per page
Query Builder