High - CVE-2024-8636 - Heap buffer overflow in Skia in Google Chrome...
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
High - CVE-2024-8637 - Use after free in Media Router in Google Chrome...
Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security...
High - CVE-2024-8638 - Type Confusion in V8 in Google Chrome prior to...
Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
High - CVE-2024-8639 - Use after free in Autofill in Google Chrome on...
Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:...
NA - CVE-2024-8642 - In Eclipse Dataspace Components, from version...
In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance...
NA - CVE-2024-8646 - In Eclipse Glassfish versions prior to 7.0.10,...
In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code...
NA - CVE-2024-43793 - Halo is an open source website building tool. A...
Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 of the Halo project. This vulnerability allows an attacker to execute...
NA - CVE-2024-4465 - An access control vulnerability was discovered...
An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with...
NA - CVE-2024-8306 - CWE-269: Improper Privilege Management...
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated...