1590 matches found
CVE-2024-7023
CVE-2024-7023 : Google Chrome Updater has insufficient data validation in its Updater component, affecting Chrome versions prior to 128.0.6537.0. This enables a remote attacker to escalate privileges via a malicious file. Remediation: update Chrome to version 128.0.6537.0 or later. If additional ...
CVE-2024-7023
Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...
CVE-2024-23460
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...
CVE-2024-23460
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...
CVE-2024-23460 Incorrect signature validation of package
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...
CVE-2024-23460
The CVE-2024-23460 issue is that the Zscaler Updater process does not validate the digital signature of the installer before execution, enabling arbitrary code to run locally. Affected software: Zscaler Client Connector on macOS versions earlier than 4.2. Root cause: lack of installer signature v...
CVE-2024-23460 Incorrect signature validation of package
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...
PT-2024-19883 · Zscaler · Zscaler Client Connector
Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 4.2 Description: The issue arises from the Zscaler Updater process not validating the digital signature of the installer before execution. This allows arbitrary code to be locally executed...
The vulnerability of the Updater component of the Google Chrome browser, which allows a hacker to escalate their privileges.
The vulnerability of the Updater component in Google Chrome browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
ROS-20240724-01
A vulnerability in the DevTools component of the Google Chrome browser is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely, allowing an intruder to execute arbitrary code through a specially crafted HTML page A vulnerability in th...
CVE-2024-38673
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Obtain Infotech Multisite Content Copier/Updater allows Reflected XSS.This issue affects Multisite Content Copier/Updater: from n/a through 1.5.0...
CVE-2024-38673 WordPress Multisite Content Copier/Updater plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Obtain Infotech Multisite Content Copier/Updater allows Reflected XSS.This issue affects Multisite Content Copier/Updater: from n/a through 1.5.0...
CVE-2024-38673
CVE-2024-38673 concerns the WordPress plugin “Multisite Content Copier/Updater.” The connected records describe an Reflect ed XSS due to Improper Neutralization of Input During Web Page Generation. Affected versions are indicated as “from n/a through 1.5.0.” The CVSS metrics shown (base score 7.1...
CVE-2024-38673 WordPress Multisite Content Copier/Updater plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Obtain Infotech Multisite Content Copier/Updater allows Reflected XSS.This issue affects Multisite Content Copier/Updater: from n/a through 1.5.0...
DEBIAN-CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...
CVE-2024-3173
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...