CVE Vulnerability Catalog

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted video file.

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allows a remote attacker who has compromised the renderer process to bypass same-origin policy via a crafted HTML page.

An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to 149.0.7827.53 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Google Chrome on iOS before version 149.0.7827.53 has a vulnerability in Autofill due to insufficient policy enforcement. A remote attacker can leak cross-origin data via a crafted HTML page.

Google Chrome on iOS before version 149.0.7827.53 has a vulnerability in Autofill due to insufficient policy enforcement. A remote attacker can leak cross-origin data via a crafted HTML page.

Google Chrome prior to version 149.0.7827.53 has an inappropriate implementation in the Input component. A remote attacker who compromised the renderer process can bypass site isolation via a crafted HTML page.

In Google Chrome prior to version 149.0.7827.53, an inappropriate implementation in Passwords allows a remote attacker to bypass same origin policy via a crafted HTML page.

Google Chrome prior to version 149.0.7827.53 had insufficient validation of untrusted input in DevTools, allowing a remote attacker who compromised the renderer process to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

A SQL injection vulnerability was found in the unknown function of the file /admin/adminHome.ph in Online Art Gallery Shop Project 1.0. The attack can be launched remotely by manipulating the social_twitter argument. The exploit is publicly available.

A SQL injection vulnerability was identified in the unknown function of the file /admin/adminHome.php in Online Art Gallery Shop Project 1.0. The attack can be launched remotely by manipulating the social_insta argument. The exploit is publicly available.

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.

On platforms running Arista EOS with 802.1x authentication configured on access/trunk ports and routing enabled on the access VLAN, a malicious supplicant may bypass the requirement to perform 802.1x authentication.

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In versions prior to 2.4.28, users can create alerts for customers that are not assigned to them. This can be abused to falsely attribute fake alerts to customers. In combination with Cross-Site Scripting, this can also be used to exfiltrate alerts from other customers. Version 2.4.28 contains a patch.

IRIS platform prior to version 2.4.28 is vulnerable to a CSRF attack because it uses the HTTP GET method to change server state. An attacker can exploit this to perform unauthorized actions on behalf of the victim.

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests.

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch.

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or directories outside the designated workspace root. Attackers can exploit the workspace file and listing APIs, which resolve symlink targets without enforcing that the final path remains within the workspace, to read external host files such as SSH keys, cloud credentials, or application tokens.

In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.