CVE-2024-7575

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

CVE-2024-7576

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-8316 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-8316

CVE-2024-8316 affects Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924). It is caused by an insecure deserialization vulnerability that can lead to remote code execution (documented as a code execution attack). The CVE entry notes a local attack vector with low privileges and no ...

CVE-2024-8316 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-7576 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-7575

Progress Telerik UI for WPF prior to 2024 Q3 (2024.3.924) is affected by a command-injection vulnerability due to improper neutralization of hyperlink elements. Affected component: UI for WPF controls; root cause is inadequate handling of hyperlink elements. Impact per sources: high/critical risk...

CVE-2024-7575 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

CVE-2024-7679

Summary: CVE-2024-7679 affects Progress Telerik UI for WinForms prior to 2024 Q3 (2024.3.924). The root cause is improper neutralization of hyperlink elements, enabling a command injection attack. What’s affected: Progress Telerik UI for WinForms versions before 2024.3.924. Impact: potential comm...

CVE-2024-7679 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

MAL-2024-8962 Malicious code in visa-ui-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visa-ui-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-7281

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2023-7282

Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2024-7019

Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2024-7020

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Telerik UI 代码问题漏洞

Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0312-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0312-1 advisory. - Chromium 129.0.6668.58 stable released 2024-09-17 boo1230678 CVE-2024-8904: Type Confusion in V8 CVE-2024-8905: Inappropriate implementation in...

Unspecified Vulnerability in Google Chrome (CNVD-2024-39250)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 124.0.6367.60, which stems from an improper UI implementation and can be exploited by remote attackers to perform UI spoofing via specific UI gestures...

Google Chrome Security Bypass Vulnerability (CNVD-2024-39742)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 124.0.6367.60, which can be exploited by remote attackers to conduct UI spoofing via specially crafted HTML pages...