Lucene search
+L

20506 matches found

Snyk
Snyk
added 2025/11/17 4:56 a.m.8 views

Malicious Package

Overview tailwind-view-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/16 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-13107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page...

4.3CVSS6.2AI score0.00203EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/15 3:50 a.m.16 views

CVE-2024-13983

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS6.5AI score0.0014EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/15 3:50 a.m.10 views

CVE-2024-9126

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. Chromium security severity: Medium...

7.5CVSS7.2AI score0.00222EPSS
SaveExploits1References1
Snyk
Snyk
added 2025/11/14 8:57 p.m.10 views

Unverified Password Change

Overview flowise-ui is a Affected versions of this package are vulnerable to Unverified Password Change via the profile update process. An attacker can gain unauthorized access to user accounts by changing the authentication password without additional verification steps. Note: This is only...

8.3CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
added 2025/11/14 8:50 p.m.8 views

Insufficient Session Expiration

Overview flowise-ui is a Affected versions of this package are vulnerable to Insufficient Session Expiration due to the failure to invalidate active session tokens after a password change. An attacker can maintain unauthorized access by continuing to use a previously established session even afte...

8.1CVSS6.9AI score
SaveExploits0References2
EUVD
EUVD
added 2025/11/14 3:30 a.m.10 views

EUVD-2024-55076

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS5.9AI score0.0014EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/14 3:15 a.m.9 views

CVE-2025-13102

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS0.00184EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/14 3:15 a.m.3 views

DEBIAN-CVE-2025-13107

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS4.9AI score0.00203EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/14 3:15 a.m.5 views

CVE-2025-13107

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2025/11/14 3:15 a.m.6 views

CVE-2025-13102

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00184EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/14 3:15 a.m.8 views

CVE-2025-13107

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS0.00203EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/14 3:15 a.m.5 views

DEBIAN-CVE-2024-13178

Inappropriate implementation in Fullscreen in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.9AI score0.00203EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/14 3:15 a.m.7 views

CVE-2024-7021

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00193EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/14 3:15 a.m.15 views

CVE-2024-13983

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS0.0014EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/14 3:15 a.m.8 views

CVE-2024-9126

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. Chromium security severity: Medium...

7.5CVSS0.00222EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/14 3:15 a.m.8 views

CVE-2024-9126

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. Chromium security severity: Medium...

7.5CVSS5.8AI score0.00222EPSS
SaveExploits1References2
NVD
NVD
added 2025/11/14 3:15 a.m.9 views

CVE-2024-11919

Inappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS0.00203EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/14 3:15 a.m.4 views

CVE-2024-11919

Inappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00203EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/11/14 2:29 a.m.19 views

CVE-2024-7021

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00193EPSS
SaveExploits0References2
Rows per page
Query Builder