GLSA-202402-14 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-14 QtWebEngine: Multiple Vulnerabilities - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

Cross site scripting

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

CVE-2023-40262

Atos Unify OpenScape Voice Trace Manager V8 before R0.9.11 is affected by an unauthenticated Stored Cross‑Site Scripting (XSS) vulnerability in the administration component via Access Request. Affected product: OpenScape Voice Trace Manager V8 (pre‑R0.9.11). Root cause: stored XSS in the admin in...

CVE-2023-40264

CVE-2023-40264 affects Atos Unify OpenScape Voice Trace Manager for versions prior to V8 R0.9.11. The issue is an authenticated path traversal vulnerability accessible via the user interface. The connected sources confirm the affected software and the root cause as a UI path traversal, with no ex...

PT-2024-12873

Name of the Vulnerable Software and Affected Versions Atos Unify OpenScape Voice Trace Manager versions prior to V8 R0.9.11 Description An issue was discovered in Atos Unify OpenScape Voice Trace Manager, allowing authenticated command injection via ftp. Recommendations For versions prior to V8...

CVE-2023-40262

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

CVE-2023-40263

Summary: CVE-2023-40263 affects Atos Unify OpenScape Voice Trace Manager on versions prior to V8 R0.9.11 and enables an authenticated command injection via FTP. The Red Hat and NVD entries corroborate the vulnerability details and indicate a high-severity impact with network access and low privil...

Exploit for Out-of-bounds Write in Google Chrome

From: https://github.com/github/securitylab/tree/main/SecurityEx...

PT-2024-5215 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.139 Description: The issue is related to a use after free in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this by using a specially crafted...

FreeBSD : qt5-webengine -- Multiple vulnerabilities (a11e7dd1-bed4-11ee-bdd6-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a11e7dd1-bed4-11ee-bdd6-4ccc6adda413 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

Google Chrome Code Execution Vulnerability (CNVD-2024-13761)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that stems from an out-of-bounds memory access in the V8 component. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Google Chrome Code Execution Vulnerability (CNVD-2024-13759)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome, which is caused due to type obfuscation in V8, and can be exploited by an attacker to execute arbitrary code on the system...

Updated chromium-browser-stable packages fix security vulnerabilities

The chromium-browser-stable package has been updated to the 120.0.6099.224 release. 4 vulnerabilities are fixed; some of them are listed below: High CVE-2024-0517: Out of bounds write in V8. Reported by Toan suto Pham of Qrious Secure on 2024-01-06. High CVE-2024-0518: Type Confusion in V8...

MGASA-2024-0017 Updated chromium-browser-stable packages fix security vulnerabilities

The chromium-browser-stable package has been updated to the 120.0.6099.224 release. 4 vulnerabilities are fixed; some of them are listed below: High CVE-2024-0517: Out of bounds write in V8. Reported by Toan suto Pham of Qrious Secure on 2024-01-06. High CVE-2024-0518: Type Confusion in V8...

openSUSE 15 Security Update : opera (openSUSE-SU-2024:0033-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0033-1 advisory. - Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a craft...

Out-of-bounds Write

V8 in Google Chrome is vulnerable to Out-of-bounds Write. The vulnerability is caused while V8's Maglev compiler attempts to compile a class that has a parent class. This can allow a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-31314

File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server...

CVE-2021-31314

File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server...

Unrestricted file upload

File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server...

FreeBSD : electron26 -- Out of bounds memory access in V8 (2264566a-a890-46eb-a895-7881dd220bd0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2264566a-a890-46eb-a895-7881dd220bd0 advisory. - Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker ...