Lucene search
+L

1854 matches found

CVE
CVE
added 2021/12/23 12:45 a.m.155 views

CVE-2021-4054

CVE-2021-4054 affects Google Chrome/Chromium autofill UI prior to 96.0.4664.93. The root cause is an incorrect security UI in the autofill path, allowing a remote attacker to spoof the displayed domain via a crafted HTML page. Affected component: Chromium browser engine’s autofill UI. Impact: dom...

6.5CVSS6.4AI score0.01192EPSS
SaveExploits0References5Affected Software1
Kaspersky
Kaspersky
added 2021/12/21 12:00 a.m.53 views

KLA12434 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Task Manager can be exploited to execute arbitrary code or caus...

9.6CVSS9.5AI score0.85352EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:00 a.m.13 views

The vulnerability of Google Chrome’s Autofill component allows a hacker to compromise the privacy and integrity of the protected information.

The vulnerability of Google Chrome’s Autofill component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created web page...

9.4CVSS7.1AI score0.01192EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.12 views

The vulnerability of the Autofill function implementations in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code or trigger service failures.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

10CVSS8.1AI score0.01237EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.13 views

The vulnerability of the Autofill component in the Microsoft Edge browser allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Autofill component in the Microsoft Edge browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

9.3CVSS7.3AI score0.04125EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.9 views

The vulnerability of the Autofill component in the Microsoft Edge browser, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Autofill component in the Microsoft Edge browser involves bypassing authentication through spearphishing. Exploiting this vulnerability allows attackers to carry out spearphishing attacks remotely...

6.5CVSS6.8AI score0.03468EPSS
SaveExploits0References7Affected Software7
Microsoft CVE
Microsoft CVE
added 2021/12/10 8:00 a.m.24 views

Chromium: CVE-2021-4065 Use after free in autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01237EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2021/12/10 8:00 a.m.27 views

Chromium: CVE-2021-4054 Incorrect security UI in autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.01192EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/12/06 12:00 a.m.70 views

Google Chrome < 96.0.4664.93 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 96.0.4664.93. It is, therefore, affected by multiple vulnerabilities as referenced in the 202112stable-channel-update-for-desktop advisory. - Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a...

8.8CVSS7.7AI score0.02073EPSS
SaveExploits0References37
Kaspersky
Kaspersky
added 2021/12/06 12:00 a.m.545 views

KLA12373 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, inject malicious code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.8AI score0.02073EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/12/06 12:00 a.m.86 views

Google Chrome < 96.0.4664.93 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 96.0.4664.93. It is, therefore, affected by multiple vulnerabilities as referenced in the 202112stable-channel-update-for-desktop advisory. - Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed ...

8.8CVSS7.7AI score0.02073EPSS
SaveExploits0References37
CNVD
CNVD
added 2021/11/25 12:00 a.m.71 views

Google Chrome has an unspecified vulnerability (CNVD-2021-92469)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 95.0.4638.69, which stems from insufficient Autofill policy enforcement. An attacker could exploit this vulnerability to leak cross-source data via specially crafted HTML pages...

4.3CVSS4.3AI score0.0087EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:00 a.m.10 views

The vulnerability of the Autofill function in Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Autofill function in Google Chrome browser is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created malicious HTML page...

4.3CVSS5.8AI score0.0087EPSS
SaveExploits0References7Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/11/23 10:15 p.m.8 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.4AI score0.0087EPSS
SaveExploits0References4
NVD
NVD
added 2021/11/23 10:15 p.m.18 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS0.0087EPSS
SaveExploits0References3
OSV
OSV
added 2021/11/23 10:15 p.m.4 views

DEBIAN-CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.6AI score0.0087EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/23 10:15 p.m.10 views

UBUNTU-CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.0087EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/11/23 9:30 p.m.56 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.4AI score0.0087EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2021/11/23 9:30 p.m.63 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS3.8AI score0.0087EPSS
SaveExploits0
CVE
CVE
added 2021/11/23 9:30 p.m.140 views

CVE-2021-38004

CVE-2021-38004 affects Chromium-based Google Chrome Autofill: insufficient policy enforcement allows a remote attacker to leak cross-origin data via a crafted HTML page, prior to version 95.0.4638.69. Affected component: Autofill in Chromium/Chrome; root cause is policy enforcement gaps. Impact: ...

4.3CVSS4.9AI score0.0087EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder