Page 515 of 2634 results (0.017 seconds)

CVSS: 6.8EPSS: 1%CPEs: 42EXPL: 0

CVE-2013-0926

https://notcve.org/view.php?id=CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site. Google Chrome versiones anteriores a v26.0.1410.43 no maneja adecuadamente el contenido activo en un elemento EMBED durante una operación de copiar-y-pegar, permitiendo a atacantes remotos tener un impacto no especificado mediante un sitio web especialmente modificado. • http://git.chromium.org/gitweb/?p=chromium/src.git%3Ba=commit%3Bh=52a30db57ecec68bb3b25fdc3de5e9bee7b80ed7 http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_26.html http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5785 http://support.apple.com/kb/HT5934 https://chromiumcodereview.appspot.com/11884025 https://code.goog • CWE-20: Improper Input Validation •

CVSS: 6.8EPSS: 0%CPEs: 14EXPL: 1

CVE-2013-2632

https://notcve.org/view.php?id=CVE-2013-2632

Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game. Google V8 anterior a v3.17.13, usado en Google Chrome anterior a v27.0.1444.3, permite a atacantes remotos causar una denegación de servicios (caída de la aplicación) o posiblemente tener otros impactos a través de código JavaScript manipulado, como se mostró con el juego Bejewele. • http://code.google.com/p/v8/source/browse/trunk/ChangeLog http://googlechromereleases.blogspot.com/2013/03/dev-channel-update_18.html https://code.google.com/p/chromium/issues/detail?id=194749 •

CVSS: 7.5EPSS: 0%CPEs: 106EXPL: 0

CVE-2013-0902

https://notcve.org/view.php?id=CVE-2013-0902

Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Vulnerabilidad en la gestión de recursos en la implementación frame-loader en Google Chrome anterior a v25.0.1364.152 permite a atacantes remotos causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html https://code.google.com/p/chromium/issues/detail?id=176882 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16439 • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 106EXPL: 0

CVE-2013-0904

https://notcve.org/view.php?id=CVE-2013-0904

The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. LA implementación de Web Audio en Google Chrome anterior a v25.0.1364.152, permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente otro impacto no especificado a través de vectores desconocidos. • http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html https://code.google.com/p/chromium/issues/detail?id=172331 https://code.google.com/p/chromium/issues/detail?id=172926 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16042 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 0%CPEs: 106EXPL: 0

CVE-2013-0911

https://notcve.org/view.php?id=CVE-2013-0911

Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors related to databases. Vulnerabilidad de salto de directorio en Google Chrome anterior a v25.0.1364.152 permite a atacantes remotos generar un impacto no especificado mediante vectores relacionados con las bases de datos. • http://googlechromereleases.blogspot.com/2013/03/stable-channel-update_4.html https://code.google.com/p/chromium/issues/detail?id=172264 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16377 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •