Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
libxml2 vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2016-5134
net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome prior to 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote malicious users to discover credentials by operating a server with a PAC sc...
Google Chrome
383
VMScore
CVE-2016-5135
WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome prior to 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote malicious users to bypass the Content Security Polic...
Google Chrome
605
VMScore
CVE-2016-5136
Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome prior to 52.0.2743.82 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to script deleti...
Google Chrome
383
VMScore
CVE-2016-5137
The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome prior to 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies...
Google Chrome
605
VMScore
CVE-2016-1705
Multiple unspecified vulnerabilities in Google Chrome prior to 52.0.2743.82 allow malicious users to cause a denial of service or possibly have other impact via unknown vectors.
Google Chrome
828
VMScore
CVE-2016-1706
The PPAPI implementation in Google Chrome prior to 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote malicious users to bypass a sandbox protection mechanism via an unexpected...
Google Chrome
383
VMScore
CVE-2016-1707
ios/web/web_state/ui/crw_web_controller.mm in Google Chrome prior to 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote malicious users to spoof the URL display via a crafted web site.
Google Chrome
605
VMScore
CVE-2016-1708
The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome prior to 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote malicious users to cause a denial of service (use-after-free) or...
Google Chrome
606
VMScore
CVE-2016-1710
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome prior to 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote malicious users to bypass the Same Origin Policy via a crafted w...
Google Chrome
606
VMScore
CVE-2016-1711
WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome prior to 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote malicious users to bypass the Same Origin Policy via a crafted web site.
Google Chrome
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »