| CVE-2024-5842 |
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to…
|
7.5
Élevée
|
11 juin 2024 |
| CVE-2024-5840 |
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access…
|
6.5
Moyenne
|
11 juin 2024 |
| CVE-2024-5838 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory…
|
8.8
Élevée
|
11 juin 2024 |
| CVE-2024-5833 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of…
|
8.8
Élevée
|
11 juin 2024 |
| CVE-2024-5832 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap…
|
8.8
Élevée
|
11 juin 2024 |
| CVE-2024-5831 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap…
|
8.8
Élevée
|
11 juin 2024 |
| CVE-2024-5830 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds…
|
8.8
Élevée
|
11 juin 2024 |
| CVE-2024-35242 |
Composer is a dependency manager for PHP
|
8.8
Élevée
|
10 juin 2024 |
| CVE-2024-35241 |
Composer is a dependency manager for PHP
|
8.8
Élevée
|
10 juin 2024 |
| CVE-2024-2408 |
The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default),…
|
5.9
Moyenne
|
9 juin 2024 |
| CVE-2024-5458 |
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering…
|
5.3
Moyenne
|
9 juin 2024 |
| CVE-2024-34006 |
The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in…
|
4.3
Moyenne
|
31 mai 2024 |
| CVE-2024-35200 |
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX…
|
5.3
Moyenne
|
29 mai 2024 |
| CVE-2024-32760 |
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can…
|
6.5
Moyenne
|
29 mai 2024 |
| CVE-2024-4671 |
Exploitée
Google Chromium Visuals Use-After-Free Vulnerability
|
9.6
Critique
|
9 mai 2024 |
| CVE-2024-3833 |
Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially…
|
8.8
Élevée
|
17 avr. 2024 |
| CVE-2024-3832 |
Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit…
|
8.8
Élevée
|
17 avr. 2024 |
| CVE-2024-3159 |
Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform…
|
8.8
Élevée
|
6 avr. 2024 |
| CVE-2024-28219 |
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy
|
6.7
Moyenne
|
3 avr. 2024 |
| CVE-2024-2886 |
Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary…
|
7.5
Élevée
|
26 mars 2024 |
| CVE-2024-2883 |
Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap…
|
7.5
Élevée
|
26 mars 2024 |
| CVE-2024-2885 |
Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap…
|
8.8
Élevée
|
26 mars 2024 |
| CVE-2024-2627 |
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap…
|
8.8
Élevée
|
20 mars 2024 |
| CVE-2024-2625 |
Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit…
|
8.8
Élevée
|
20 mars 2024 |
| CVE-2024-2400 |
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to…
|
8.8
Élevée
|
13 mars 2024 |