Lucene search
+L

14370 matches found

Debian CVE
Debian CVE
added 2021/02/22 9:20 p.m.37 views

CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

8.8CVSS9.2AI score0.01468EPSS
SaveExploits1
CVE
CVE
added 2021/02/22 9:20 p.m.267 views

CVE-2021-21149

CVE-2021-21149 is a stack buffer overflow in the Data Transfer component of Google Chrome on Linux prior to 88.0.4324.182, enabling remote out-of-bounds memory access via a crafted HTML page. Upstream and downstream advisories (Chromium/Chrome updates) fix this by upgrading to 88.0.4324.182 or ne...

8.8CVSS8.6AI score0.01468EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:00 a.m.52 views

Debian DSA-4858-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-21148 Mattias Buelens discovered a buffer overflow issue in the v8 JavaScript library. - CVE-2021-21149 Ryoya Tsukasaki discovered a stack overflow issue in the Data Transfer implementation. - CVE-2021-21150 Wooj...

9.6CVSS8.8AI score0.19968EPSS
SaveExploits8References23
ATTACKERKB
ATTACKERKB
added 2021/02/19 8:15 p.m.5 views

CVE-2021-20587

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions...

9.8CVSS8.4AI score0.03886EPSS
SaveExploits0References7Affected Software34
OSV
OSV
added 2021/02/19 4:15 p.m.9 views

CVE-2021-22703

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

7.5CVSS7.1AI score0.00599EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/02/19 1:24 a.m.30 views

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a stack overflow in Data Transfer...

8.8CVSS4.3AI score0.01468EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:00 a.m.8 views

The vulnerability of the Data Transfer component in the Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the Data Transfer component in the Google Chrome web browser is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.3CVSS8.3AI score0.01468EPSS
SaveExploits1References12Affected Software6
CNVD
CNVD
added 2021/02/18 12:00 a.m.27 views

Accellion FTA OS Command Injection Vulnerability (CNVD-2021-11053)

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. An OS command injection vulnerability exists in Accellion FTA 912411 and earlier versions. The vulnerability can be exploited to execute...

7.8CVSS7.5AI score0.03654EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/18 12:00 a.m.49 views

FileZen OS Command Injection Vulnerability

FileZen is a device for secure file transfer and sharing via email or web interface. An OS command injection vulnerability exists in FileZen 3.0.0 - 4.2.7, 5.0.0 - 5.0.2. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands...

9CVSS8AI score0.03541EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/18 12:00 a.m.14 views

Google Chrome stack overflow vulnerability (CNVD-2021-13239)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A stack overflow vulnerability exists in Data Transfer in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this time...

8.8CVSS6.7AI score0.01468EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/18 12:00 a.m.56 views

Accellion FTA OS Command Injection Vulnerability

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. An OS command injection vulnerability exists in Accellion FTA 912370 and earlier versions. An attacker can exploit this vulnerability by...

10CVSS7.5AI score0.56686EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/18 12:00 a.m.22 views

Accellion FTA SQL Injection Vulnerability

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. A SQL injection vulnerability exists in Accellion FTA 912370 and earlier versions. The vulnerability can be exploited to conduct a SQL...

9.8CVSS7.6AI score0.05998EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/18 12:00 a.m.24 views

Accellion FTA Server-Side Request Forgery Vulnerability

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. A server-side request forgery vulnerability exists in Accellion FTA 912411 and earlier versions. An attacker can exploit this...

9.8CVSS6.8AI score0.11406EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/02/17 11:28 p.m.131 views

Chromium CVE-2021-21149: Stack overflow in Data Transfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.01468EPSS
SaveExploits1
OSV
OSV
added 2021/02/17 8:15 a.m.23 views

CVE-2021-23339

This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers...

6.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2021/02/17 8:15 a.m.59 views

CVE-2021-23339

This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers...

6.5CVSS0.00711EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/17 8:15 a.m.28 views

Design/Logic Flaw

This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers...

6.4CVSS6.4AI score0.00711EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/17 7:55 a.m.47 views

CVE-2021-23339 HTTP Request Smuggling

This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers...

5CVSS6.7AI score0.00711EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/17 7:54 a.m.12 views

CVE-2021-23339

This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers...

6.5CVSS6.6AI score0.00711EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/02/17 12:00 a.m.14 views

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A stack overflow vulnerability exists in Data Transfer in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this time...

8.8CVSS7.4AI score0.01468EPSS
SaveExploits1References11
Rows per page
Query Builder