Category

Browsers

10,968 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2,767 results · Clear filters · Feed

Medium 4.3

CVE-2022-28147

Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin

A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

Jenkins Project Jenkins Continuous Integration with Toad Edge Plugin org.jenkins-ci.plugins:ci-with-toad-edge Web / CMS Browsers Maven

Mar 29, 2022
Medium 6.5

CVE-2022-28146

Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps.

Jenkins Project Jenkins Continuous Integration with Toad Edge Plugin org.jenkins-ci.plugins:ci-with-toad-edge Web / CMS Browsers Maven

Mar 29, 2022
Medium 5.4

CVE-2022-22511

WAGO PLCs WBM vulnerable to reflected XSS

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been co…

WAGO Edge Controller (752-8303/8000-002) Compact Controller CC100 (751-9301) Series PFC200 (750-82xx/xxx-xxx) Browsers ICS / OT

Mar 9, 2022
Medium 6.5

CVE-2022-24522

Skype Extension for Chrome Information Disclosure Vulnerability

Skype Extension for Chrome Information Disclosure Vulnerability

Microsoft Skype Extension for Chrome Browsers

Mar 9, 2022
Medium 6.3

CVE-2022-23262

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Feb 7, 2022
Medium 5.3

CVE-2022-23261

Microsoft Edge (Chromium-based) Tampering Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Feb 7, 2022
Medium 4.3

CVE-2022-23258

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Jan 25, 2022
Medium 6.1

CVE-2022-21970 Public exploit

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 6.1

CVE-2022-21954

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 4.2

CVE-2022-21931

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 4.2

CVE-2022-21930

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 5.3

CVE-2021-34424

Process memory exposure in Zoom Client and other products

A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for And…

Zoom Video Communications Zoom On-Premise Meeting Connector MMR Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) Zoom On-Premise Virtual Room Connector Linux Windows Android macOS iOS Browsers

Nov 24, 2021
Medium 4.2

CVE-2021-43221

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Nov 24, 2021
Medium 6.1

CVE-2021-38000 Exploited

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remot…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Nov 23, 2021
KEV Nov 3, 2021
Medium 4.3

CVE-2021-41351 Public exploit

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Edge (Chrome based) Spoofing on IE Mode

Microsoft Microsoft Edge (Chromium-based) in IE Mode Browsers

Nov 10, 2021
Medium 6.5

CVE-2021-37976 Exploited EPSS 20%

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain poten…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Oct 8, 2021
KEV Nov 3, 2021
Medium 4.3

CVE-2020-4941

IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in…

IBM Edge Browsers

Sep 23, 2021
Medium 4.0

CVE-2020-4809

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189…

IBM Edge Browsers

Sep 23, 2021
Medium 4.0

CVE-2020-4805

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189…

IBM Edge Browsers

Sep 23, 2021
Medium 4.0

CVE-2020-4803

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189…

IBM Edge Browsers

Sep 23, 2021
Medium 5.4

CVE-2021-23443

Cross-site Scripting (XSS)

This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used.

edge.js Browsers npm

Sep 21, 2021
Medium 6.4

CVE-2021-38669

Microsoft Edge (Chromium-based) Tampering Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 15, 2021
Medium 6.1

CVE-2021-38642

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 2, 2021
Medium 6.1

CVE-2021-38641

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 2, 2021
Medium 5.3

CVE-2021-36930

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 2, 2021
Medium 4.6

CVE-2021-26439

Microsoft Edge for Android Information Disclosure Vulnerability

Microsoft Edge for Android Information Disclosure Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Sep 2, 2021
Medium 6.1

CVE-2021-26436

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 2, 2021
Medium 4.4

CVE-2021-36931

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Aug 26, 2021
Medium 6.3

CVE-2021-36929

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Aug 26, 2021
Medium 6.0

CVE-2021-36928

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Aug 26, 2021
Medium 6.8

CVE-2021-21779

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Browsers Debian Ubuntu Alpine

Jul 8, 2021
Medium 6.8

CVE-2021-21775

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitG…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Browsers Debian Ubuntu Alpine

Jul 7, 2021
Medium 6.5

CVE-2021-30533 Exploited EPSS 17%

Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to byp…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jun 7, 2021
KEV Jun 27, 2022
Medium 4.3

CVE-2013-1055

Potential DoS through abuse of rate limit in libunity-webapps for Firefox

The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks unti…

Canonical unity-firefox-extension libunity-webapps unity-firefox-extension Browsers Ubuntu

Apr 7, 2021
Medium 4.3

CVE-2013-1054

Possible remote DOS in WebApps

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.0…

Canonical unity-firefox-extension unity-firefox-extension Browsers Ubuntu

Apr 7, 2021
Medium 5.4

CVE-2020-4792

IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

IBM Edge Browsers

Apr 5, 2021
Medium 5.4

CVE-2021-24113

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Feb 25, 2021
Medium 5.0

CVE-2021-24100

Microsoft Edge for Android Information Disclosure Vulnerability

Microsoft Edge for Android Information Disclosure Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Feb 25, 2021
Medium 4.2

CVE-2021-1705

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based) Browsers

Jan 12, 2021
Medium 4.3

CVE-2020-17153

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Dec 9, 2020