Lucene search
+L

2098 matches found

Cvelist
Cvelist
•added 2025/01/27 9:45 p.m.•23 views

CVE-2024-54530

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication...

0.00567EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/27 12:00 a.m.•18 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.2 and iPadOS version 18.2, which stems from a password autofill...

9.1CVSS7.6AI score0.00567EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•7 views

PT-2025-3044 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 watchOS versions prior to 11.2 visionOS versions prior to 2.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to the Password Autofill component in the mentioned operatin...

9.1CVSS6.8AI score0.00567EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2024/12/03 12:00 a.m.•14 views

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to carry out spear-phishing attacks.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to carry out phishing attacks using a specially created HTML page...

5CVSS5.5AI score0.00436EPSS
SaveExploits1References11Affected Software6
AstraLinux
AstraLinux
•added 2024/11/23 3:04 a.m.•11 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6.2AI score0.00366EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2024/11/23 3:04 a.m.•12 views

Astra Linux – Vulnerability in Chromium

Before version 128.0.6613.84, Autofill in Google Chrome allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS8.1AI score0.00575EPSS
SaveExploits0References3
OSV
OSV
•added 2024/11/22 2:44 p.m.•19 views

OPENSUSE-SU-2024:0374-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 131.0.6778.69 stable released 2024-11-12 boo1233311 CVE-2024-11110: Inappropriate implementation in Blink. CVE-2024-11111: Inappropriate implementation in Autofill. CVE-2024-11112: Use after free in Media. CVE-2024-11113: Use after fre...

8.8CVSS7.2AI score0.00436EPSS
SaveExploits2References10
NVD
NVD
•added 2024/11/14 11:15 p.m.•36 views

CVE-2017-13227

In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.00084EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/14 11:15 p.m.•14 views

CVE-2017-13227

In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/14 10:10 p.m.•32 views

CVE-2017-13227

In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00084EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/14 10:10 p.m.•17 views

CVE-2017-13227

In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.6AI score0.00084EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/11/14 8:00 a.m.•53 views

Chromium: CVE-2024-11111 Inappropriate implementation in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.6AI score0.00436EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2024/11/14 1:01 a.m.•5 views

SUSE CVE-2024-11111

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.4AI score0.00436EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•4 views

CVE-2017-13227: Undefined Security Weakness

In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS8.1AI score0.00084EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•16 views

PT-2024-10579 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the autofill service, where the package name provided by the app process is trusted inappropriately. This could lead to...

5.5CVSS8.7AI score0.00084EPSS
SaveExploits0References4
NVD
NVD
•added 2024/11/12 9:15 p.m.•19 views

CVE-2024-11111

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00436EPSS
SaveExploits1References2
OSV
OSV
•added 2024/11/12 9:15 p.m.•5 views

DEBIAN-CVE-2024-11111

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.8AI score0.00436EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/12 9:15 p.m.•14 views

CVE-2024-11111

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.1AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/12 8:09 p.m.•40 views

CVE-2024-11111

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00436EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/11/12 8:09 p.m.•23 views

CVE-2024-11111

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.8AI score0.00436EPSS
SaveExploits1
Rows per page
Query Builder