Page 658 of 3354 results (0.012 seconds)

CVSS: 7.5EPSS: 0%CPEs: 33EXPL: 0

CVE-2010-1237

https://notcve.org/view.php?id=CVE-2010-1237

Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element. Google Chrome 4.1 BETA en versiones anteriores a la 4.1.249.1036 permite a atacantes remotos provocar una denegación de servicio (error de memoria) o posiblemente tener otro impacto no especificado mediante un elemento SVG vacío. • http://code.google.com/p/chromium/issues/detail?id=37061 http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14374 • CWE-20: Improper Input Validation •

CVSS: 10.0EPSS: 0%CPEs: 85EXPL: 0

CVE-2010-1228

https://notcve.org/view.php?id=CVE-2010-1228

Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors. Múltiples condiciones de carrera en la infraestructura sandbox en Google Chrome en versiones anteriores a la 4.1.249.1036 tienen un impacto y unos vectores de ataque no especificados. • http://code.google.com/p/chromium/issues/detail?id=28804 http://code.google.com/p/chromium/issues/detail?id=31880 http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13829 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2010-1230

https://notcve.org/view.php?id=CVE-2010-1230

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors. Google Chrome en versiones anteriores a la 4.1.249.1036 no tiene el comportamiento esperado al intentar borrar los Web SQL Databases y limpiar el estado Strict Transport Security (STS) lo que tiene un impacto y unos vectores de ataque no especificados. • http://code.google.com/p/chromium/issues/detail?id=30801 http://code.google.com/p/chromium/issues/detail?id=33445 http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14292 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.0EPSS: 0%CPEs: 84EXPL: 0

CVE-2010-1232

https://notcve.org/view.php?id=CVE-2010-1232

Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via a malformed SVG document. Google Chrome en versiones anteriores a la 4.1.249.1036 permite a atacantes remotos provocar una denegación de servicio (error de memoria) o posiblemente tener otro impacto no especificado mediante un documento SVG malformado. • http://code.google.com/p/chromium/issues/detail?id=34978 http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14000 • CWE-399: Resource Management Errors •

CVSS: 4.3EPSS: 0%CPEs: 225EXPL: 1

CVE-2010-1236

https://notcve.org/view.php?id=CVE-2010-1236

The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence. La función protocolIs en el archivo platform/KURLGoogle.cpp en WebCore en WebKit anterior a r55822, tal y como es usado en Chrome de Google anterior a versión 4.1.249.1036 y Flock Browser versiones 3.x anteriores a 3.0.0.4112, no maneja apropiadamente un espacio en blanco al principio de una dirección URL, lo que permite a los atacantes remotos conducir ataques de tipo cross-site scripting (XSS) por medio de una URL javascript: especialmente diseñada, como es demostrado por una secuencia \x00javascript:alert. • http://code.google.com/p/chromium/issues/detail?id=37383 http://codereview.chromium.org/858001 http://flock.com/security http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://secunia.com/advisories/43068 http://src.chromium.org/viewvc/chrome?view=rev&revision=41244 http://www.vupen.com/english/advisories/2011/0212 https://bugs.webkit.org/show_bug.cgi?id=35948 https://oval.cise • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •