|
254481
|
8.8 |
HIGH
Network
|
google debian
|
chrome debian_linux
|
Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML pag…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2017-15393
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254482
|
4.3 |
MEDIUM
Network
|
google debian
|
chrome debian_linux
|
Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Regist…
|
CWE-20
Improper Input Validation
|
CVE-2017-15392
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254483
|
6.5 |
MEDIUM
Network
|
google debian
|
chrome debian_linux
|
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.
|
NVD-CWE-noinfo
|
CVE-2017-15391
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254484
|
6.5 |
MEDIUM
Network
|
google debian
|
chrome debian_linux
|
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
|
CWE-20
Improper Input Validation
|
CVE-2017-15390
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254485
|
6.5 |
MEDIUM
Network
|
google debian
|
chrome debian_linux
|
An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
|
CWE-20
Improper Input Validation
|
CVE-2017-15389
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254486
|
8.8 |
HIGH
Network
|
google debian
|
chrome debian_linux
|
Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-15388
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254487
|
8.8 |
HIGH
Network
|
google debian
|
chrome debian_linux
|
Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a …
|
NVD-CWE-noinfo
|
CVE-2017-15387
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254488
|
6.5 |
MEDIUM
Network
|
google debian
|
chrome debian_linux
|
Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
|
CWE-20
Improper Input Validation
|
CVE-2017-15386
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254489
|
9.8 |
CRITICAL
Network
|
fasterxml debian redhat netapp oracle
|
jackson-databind debian_linux openshift_container_platform satellite satellite_capsule jboss_enterprise_application_platform oncommand_balance snapcenter oncommand_shift on…
|
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously craft…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2017-15095
|
2024-11-21 12:14 |
2018-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254490
|
8.8 |
HIGH
Network
|
cloudera
|
data_science_workbench
|
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW.…
|
CWE-269
Improper Privilege Management
|
CVE-2017-15536
|
2024-11-21 12:14 |
2018-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|