Lucene search
+L

1854 matches found

OSV
OSV
added 2022/03/09 12:00 a.m.10 views

UBUNTU-CVE-2022-26382

While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox 98...

4.3CVSS7.3AI score0.00493EPSS
SaveExploits1References5
CNVD
CNVD
added 2022/03/09 12:00 a.m.65 views

Google Chrome Autofill Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability that can be exploited by attackers to bypass security restrictions...

6.5CVSS7.3AI score0.00904EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:00 a.m.19 views

The vulnerability of the Autofill function implementation in Google Chrome browsers allows attackers to compromise the integrity of the protected information.

The vulnerability of the Autofill function in Google Chrome browsers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using a specially crafted HTML page...

7.1CVSS6.7AI score0.01082EPSS
SaveExploits1References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/03/08 12:00 a.m.52 views

Mozilla Firefox < 98.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 98.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-10 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, the...

9.6CVSS7.5AI score0.00931EPSS
SaveExploits5References8
Tenable Nessus
Tenable Nessus
added 2022/03/08 12:00 a.m.158 views

Mozilla Firefox < 98.0

The version of Firefox installed on the remote Windows host is prior to 98.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-10 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were abl...

9.6CVSS7.5AI score0.00931EPSS
SaveExploits5References8
CNNVD
CNNVD
added 2022/03/08 12:00 a.m.18 views

Mozilla Firefox 信息泄露漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 98.0, which stems from an error in the implementation of the Autofill tooltip when rendering text using page fonts. A...

4.3CVSS8.3AI score0.00493EPSS
SaveExploits1References12
Veracode
Veracode
added 2022/03/07 12:21 a.m.29 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to an Inappropriate implementation in Autofill...

6.5CVSS3.7AI score0.00904EPSS
SaveExploits0References4Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/03/03 8:00 a.m.70 views

Chromium: CVE-2022-0807 Inappropriate implementation in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.5AI score0.00904EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2022/03/03 12:00 a.m.71 views

KLA12482 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to cause...

9.6CVSS9.7AI score0.01703EPSS
SaveExploits2References23
Kaspersky
Kaspersky
added 2022/03/01 12:00 a.m.549 views

KLA12473 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory...

9.6CVSS9.6AI score0.01703EPSS
SaveExploits5References3
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:00 a.m.20 views

The vulnerability in the implementation of the Autofill function in Google Chrome and Microsoft Edge browsers allows attackers to circumvent existing security restrictions.

The vulnerability of Autofill implementations in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

10CVSS6.7AI score0.00582EPSS
SaveExploits0References12Affected Software6
OSV
OSV
added 2022/02/12 2:15 a.m.7 views

CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS8.5AI score
SaveExploits0References2
OSV
OSV
added 2022/02/12 2:15 a.m.5 views

DEBIAN-CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.9AI score0.00582EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/12 2:15 a.m.17 views

CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS0.00582EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/12 2:15 a.m.12 views

CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.8AI score0.00582EPSS
SaveExploits0References3
Prion
Prion
added 2022/02/12 2:15 a.m.22 views

Design/Logic Flaw

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

4.3CVSS6.5AI score0.00582EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/02/12 2:15 a.m.8 views

UBUNTU-CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS5.8AI score0.00582EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/02/12 2:15 a.m.32 views

CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.8AI score0.00582EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2022/02/12 1:36 a.m.48 views

CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS7.2AI score0.00582EPSS
SaveExploits0
CVE
CVE
added 2022/02/12 1:36 a.m.124 views

CVE-2022-0309

CVE-2022-0309 corresponds to an insecure implementation in Chrome’s Autofill feature that allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue affects Google Chrome prior to version 97.0.4692.99. The referenced advisories indicate this vulnerability is ad...

6.5CVSS6.5AI score0.00582EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder