Lucene search
+L

47 matches found

NVD
NVD
added 2020/08/21 6:15 p.m.25 views

CVE-2020-5775

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...

5.8CVSS5.8AI score0.06531EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/08/21 5:36 p.m.32 views

CVE-2020-5775

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...

5.8AI score0.06531EPSS
SaveExploits1References1
CVE
CVE
added 2020/08/21 5:36 p.m.98 views

CVE-2020-5775

Canvas LMS 2020-07-29 is exposed to a blind Server-Side Request Forgery (SSRF) that allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains. The vulnerability potentially enables access to sensitive information, data modification...

5.8CVSS5.7AI score0.06531EPSS
SaveIn wildExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2019/10/12 2:21 a.m.31 views

CVE-2019-5775

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

6.5CVSS3.3AI score0.01468EPSS
SaveExploits0References4
OSV
OSV
added 2019/02/19 5:29 p.m.8 views

CVE-2019-5775

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

6.5CVSS8.4AI score
SaveExploits0References7
CVE
CVE
added 2019/02/19 5:00 p.m.270 views

CVE-2019-5775

CVE-2019-5775 corresponds to a vulnerability in Google Chrome’s Omnibox: an incorrect handling of a confusable character enables a remote attacker to spoof the URL bar via a crafted domain name. The issue affects Chrome versions prior to 72.0.3626.81. Exploitation could mislead users by displayin...

6.5CVSS5.6AI score0.01468EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2019/02/19 5:00 p.m.33 views

CVE-2019-5775

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

6.5CVSS7.2AI score0.01468EPSS
SaveExploits0
Debian
Debian
added 2019/02/19 2:54 a.m.220 views

[SECURITY] [DSA 4395-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4395-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 18, 2019 https://www.debian.org/security/faq -...

6.8CVSS0.5AI score0.12777EPSS
SaveExploits2
Debian
Debian
added 2019/02/19 2:54 a.m.299 views

[SECURITY] [DSA 4395-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4395-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 18, 2019 https://www.debian.org/security/faq -...

9.6CVSS9.1AI score0.12777EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2019/02/19 12:00 a.m.61 views

Debian DSA-4395-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-17481 A use-after-free issue was discovered in the pdfium library. - CVE-2019-5754 Klzgrad discovered an error in the QUIC networking implementation. - CVE-2019-5755 Jay Bosamiya discovered an implementation erro...

9.6CVSS7.4AI score0.12777EPSS
SaveExploits2References63
RedHat Linux
RedHat Linux
added 2019/02/12 2:46 a.m.194 views

Critical: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

9.6CVSS7.2AI score0.12777EPSS
SaveExploits2References30
Tenable Nessus
Tenable Nessus
added 2019/01/31 12:00 a.m.107 views

Google Chrome < 72.0.3626.81 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 201901stable-channel-update-for-desktop advisory. - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to...

9.6CVSS8.3AI score0.12777EPSS
SaveExploits2References67
Tenable Nessus
Tenable Nessus
added 2019/01/31 12:00 a.m.1494 views

Google Chrome < 72.0.3626.81 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.81. It is, therefore, affected by multiple vulnerabilities as referenced in the 201901stable-channel-update-for-desktop advisory. - Missing URI encoding of untrusted input in DevTools in Google Chrome prior to...

9.6CVSS8.3AI score0.12777EPSS
SaveExploits2References67
Cvelist
Cvelist
added 2018/07/09 7:00 p.m.36 views

CVE-2017-3197 GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash...

9.6AI score0.05641EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2018/07/09 12:00 a.m.43 views

GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash. Recent assessment...

10CVSS3.9AI score0.05641EPSS
SaveIn wildExploits1References6
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.12 views

CVE-2012-5775

...

SaveExploits0
CVE
CVE
added 2017/05/11 2:01 p.m.28 views

CVE-2012-5775

CVE-2012-5775 is rejected/not used and does not represent an active vulnerability entry.

7.4AI score
SaveExploits0
Prion
Prion
added 2015/08/17 12:00 a.m.35 views

Memory corruption

FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-3804 and CVE-2015-5775...

6.8CVSS7.8AI score0.03643EPSS
SaveExploits0References6Affected Software2
CVE
CVE
added 2015/08/16 11:00 p.m.69 views

CVE-2015-5775

CVE-2015-5775 is an Apple FontParser memory corruption vulnerability in iOS before 8.4.1 and OS X before 10.10.5. A crafted font file could allow remote code execution or memory corruption leading to a crash. Connected sources confirm FontParser issues and Apple advisories indicate affected versi...

7.5CVSS8.7AI score0.03643EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2014/09/09 10:00 a.m.46 views

CVE-2014-5775

CVE-2014-5775 concerns the Android app The Super Fast Browser (iron.web.jalepano.browser) , version 2.0.5.6 , which does not verify X.509 certificates from SSL servers. This allows an attacker to perform a man-in-the-middle attack and obtain sensitive information via a crafted certificate. The av...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder