Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 9

Количество 9

github логотип

GHSA-j459-hg6r-rr22

больше 4 лет назад

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

EPSS: Низкий
ubuntu логотип

CVE-2015-6790

почти 11 лет назад

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

CVSS2: 4.3
EPSS: Низкий
redhat логотип

CVE-2015-6790

почти 11 лет назад

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2015-6790

почти 11 лет назад

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2015-6790

почти 11 лет назад

The WebPageSerializerImpl::openTagToString function in WebKit/Source/w ...

CVSS2: 4.3
EPSS: Низкий
fstec логотип

BDU:2016-00967

почти 11 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю внедрить произвольный Веб- или HTML-код

CVSS2: 4.3
EPSS: Низкий
altlinux логотип

ALT-PU-2015-2088

почти 11 лет назад

ALT-PU-2015-2088: package `chromium` update to version 47.0.2526.80-alt1

CVSS2: 10
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2015:2291-1

почти 11 лет назад

Security update for Chromium

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2015:2290-1

почти 11 лет назад

Security update for Chromium

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-j459-hg6r-rr22

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

1%
Низкий
больше 4 лет назад
ubuntu логотип
CVE-2015-6790

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

CVSS2: 4.3
1%
Низкий
почти 11 лет назад
redhat логотип
CVE-2015-6790

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

CVSS2: 4.3
1%
Низкий
почти 11 лет назад
nvd логотип
CVE-2015-6790

The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.

CVSS2: 4.3
1%
Низкий
почти 11 лет назад
debian логотип
CVE-2015-6790

The WebPageSerializerImpl::openTagToString function in WebKit/Source/w ...

CVSS2: 4.3
1%
Низкий
почти 11 лет назад
fstec логотип
BDU:2016-00967

Уязвимость браузера Google Chrome, позволяющая нарушителю внедрить произвольный Веб- или HTML-код

CVSS2: 4.3
1%
Низкий
почти 11 лет назад
altlinux логотип
ALT-PU-2015-2088

ALT-PU-2015-2088: package `chromium` update to version 47.0.2526.80-alt1

CVSS2: 10
почти 11 лет назад
suse-cvrf логотип
openSUSE-SU-2015:2291-1

Security update for Chromium

почти 11 лет назад
suse-cvrf логотип
openSUSE-SU-2015:2290-1

Security update for Chromium

почти 11 лет назад

Уязвимостей на страницу