Threat database

A vulnerability exists in the H3C ICG2000 Unified Communication Gateway 2023 in the Web Management Module, specifically in the processing of the /wnm/check.j file. This flaw can be exploited remotely to bypass authentication. The vulnerability has a medium severity score of 5.3 and an exploit has been published. The vendor has acknowledged the report but has not yet provided a fix or further response.

Zipline versions before 4.8.0 have a race condition vulnerability in the file src/server/routes/raw/[id].ts. This flaw allows remote attackers to bypass file maxViews limits by exploiting non-atomic view counting. By sending parallel requests, attackers can cause the system to read the same pre-increment view count multiple times, enabling them to view files that should be limited or deleted after a certain number of views beyond the intended limit.

A use-after-free vulnerability exists in the Layout component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Passwords component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A vulnerability in Google Chrome on Windows prior to version 157.0.8103.78 involves an uninitialized resource in the Media component. This flaw could allow a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. The issue is classified with high severity by Chromium security.

A buffer overflow vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A vulnerability in the V8 JavaScript engine used by Google Chrome prior to version 157.0.8103.78 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. The issue is due to incomplete cleanup in V8. The Chromium security team rates this vulnerability as High severity.

A use-after-free vulnerability exists in the Compositing component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The issue is classified with high severity by Chromium security.

A use-after-free vulnerability in the PDF component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability is classified with high severity by Chromium security.

A race condition vulnerability exists in the Extensions component of Google Chrome on Mac systems prior to version 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to obtain sensitive information by leveraging crafted network traffic. The vulnerability is classified with high severity by Chromium security.

A vulnerability in Google Chrome on Mac prior to version 157.0.8103.78 allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This issue is due to incorrect reference resolution in the browser component.

A vulnerability in the Skia graphics library used by Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to obtain cross-origin data by leveraging an uninitialized resource. This issue is classified with high severity by the Chromium security team.

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome versions prior to 157.0.8103.78 allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. The vulnerability is rated with high severity by the Chromium security team.

An out-of-bounds read vulnerability exists in the Compositing component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use of uninitialized variable vulnerability exists in the Skia component of Google Chrome on Android versions prior to 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability in the CSS component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability in the CSS component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability is classified as critical by Chromium security.

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability is rated with high severity by the Chromium security team.

A vulnerability in the ANGLE component of Google Chrome on Windows versions prior to 157.0.8103.78 allows a remote attacker to bypass the web origin policy by using a crafted HTML page. This flaw is classified with high severity by Chromium security.