Archive
11 December 2018
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the loc…
-
Unscored —
Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.…
-
Unscored —
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit he…
-
Unscored —
Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially …
-
Unscored —
Execution of user supplied Javascript during object deserialization can update object length leading to an out of bound…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote at…
-
Unscored —
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to pr…
-
Unscored —
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to poten…
-
High 8.8
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Ch…
KEV Jun 8, 2022 -
Critical 9.8
Improper Restriction of XML External Entity Reference in pippo-core
jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.
-
Unscored —
In Evernote before 7.6 on macOS, there is a local file path traversal issue in attachment previewing, aka MACOSNOTE-286…
-
Unscored —
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCm…
-
Unscored —
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. There is a stack…