CVE-2025-3073

CVE-2025-3073

Título es
CVE-2025-3073

Mié, 02/04/2025 – 01:15

Gravedad 2.0 Txt
Pendiente de análisis

Título en

CVE-2025-3073

Descripción en
Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

02/04/2025
02/04/2025
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
Pendiente de análisis

Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/388680893

    • Enviar en el boletín
    Off

    CVE-2025-3072

    CVE-2025-3072

    Título es
    CVE-2025-3072

    Mié, 02/04/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-3072

    Descripción en
    Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

    02/04/2025
    02/04/2025
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/362545037

    • Enviar en el boletín
    Off

    CVE-2025-3071

    CVE-2025-3071

    Título es
    CVE-2025-3071

    Mié, 02/04/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-3071

    Descripción en
    Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

    02/04/2025
    02/04/2025
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/40051596

    • Enviar en el boletín
    Off

    CVE-2025-3070

    CVE-2025-3070

    Título es
    CVE-2025-3070

    Mié, 02/04/2025 – 01:15

    Tipo
    CWE-20

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-3070

    Descripción en
    Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

    02/04/2025
    02/04/2025
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/40086360

    • Enviar en el boletín
    Off

    CVE-2025-3068

    CVE-2025-3068

    Título es
    CVE-2025-3068

    Mié, 02/04/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-3068

    Descripción en
    Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

    02/04/2025
    02/04/2025
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/401823929

    • Enviar en el boletín
    Off

    CVE-2025-3069

    CVE-2025-3069

    Título es
    CVE-2025-3069

    Mié, 02/04/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-3069

    Descripción en
    Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

    02/04/2025
    02/04/2025
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/40060076

    • Enviar en el boletín
    Off

    CVE-2025-3067

    CVE-2025-3067

    Título es
    CVE-2025-3067

    Mié, 02/04/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-3067

    Descripción en
    Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium)

    02/04/2025
    02/04/2025
    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias

  • https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html

  • https://issues.chromium.org/issues/376491759

    • Enviar en el boletín
    Off

    CVE-2025-31628

    CVE-2025-31628

    Título es
    CVE-2025-31628

    Mar, 01/04/2025 – 21:15

    Tipo
    CWE-862

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-31628

    Descripción en
    Missing Authorization vulnerability in SlicedInvoices Sliced Invoices. This issue affects Sliced Invoices: from n/a through 3.9.4.

    01/04/2025
    01/04/2025
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

    Gravedad 3.1 (CVSS 3.1 Base Score)
    5.30

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    MEDIUM

    Referencias

  • https://patchstack.com/database/wordpress/plugin/sliced-invoices/vulnerability/wordpress-sliced-invoices-plugin-3-9-4-broken-access-control-vulnerability?_s_id=cve

    • Enviar en el boletín
    Off

    CVE-2025-31619

    CVE-2025-31619

    Título es
    CVE-2025-31619

    Mar, 01/04/2025 – 21:15

    Tipo
    CWE-89

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-31619

    Descripción en
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in marcoingraiti Actionwear products sync allows SQL Injection. This issue affects Actionwear products sync: from n/a through 2.3.3.

    01/04/2025
    01/04/2025
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

    Gravedad 3.1 (CVSS 3.1 Base Score)
    8.50

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    HIGH

    Referencias

  • https://patchstack.com/database/wordpress/plugin/actionwear-products-sync/vulnerability/wordpress-actionwear-products-sync-plugin-2-3-3-sql-injection-vulnerability?_s_id=cve

    • Enviar en el boletín
    Off

    CVE-2025-31612

    CVE-2025-31612

    Título es
    CVE-2025-31612

    Mar, 01/04/2025 – 21:15

    Tipo
    CWE-502

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-31612

    Descripción en
    Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll allows Object Injection. This issue affects CBX Poll: from n/a through 1.2.7.

    01/04/2025
    01/04/2025
    Vector CVSS:3.1
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    Gravedad 3.1 (CVSS 3.1 Base Score)
    9.80

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    CRITICAL

    Referencias

  • https://patchstack.com/database/wordpress/plugin/cbxpoll/vulnerability/wordpress-cbx-poll-plugin-1-2-7-php-object-injection-vulnerability?_s_id=cve

    • Enviar en el boletín
    Off