Lucene search
+L

1629 matches found

OSV
OSV
added 2020/07/22 5:15 p.m.1 views

UBUNTU-CVE-2020-6521

Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS5.8AI score0.01703EPSS
SaveExploits0References2
CVE
CVE
added 2020/07/22 4:16 p.m.292 views

CVE-2020-6521

CVE-2020-6521 affects Google Chrome prior to 84.0.4147.89, describing a side-channel information leakage in autofill that could let a remote attacker read potentially sensitive data from process memory via a crafted HTML page. Public details consistently identify Chrome/Chromium as the affected s...

6.5CVSS6.4AI score0.01703EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2020/07/22 4:16 p.m.22 views

CVE-2020-6521

Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.6AI score0.01703EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2020/07/22 4:16 p.m.31 views

CVE-2020-6521

Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.1AI score0.01703EPSS
SaveExploits0
CNVD
CNVD
added 2020/07/16 12:0 a.m.7 views

Apple Safari Login AutoFill Component Logic Flaw Vulnerability

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in the Safari Login AutoFill component in Apple Safari versions prior to 13.1.2, iOS versions prior to 13.6, and iPadOS versions prior ...

7.5CVSS6.5AI score0.00507EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:0 a.m.6 views

Google Chrome Side Channel Information Leakage Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. Autofill in versions prior to Google Chrome 84.0.4147.89 suffers from side-channel information leakage, and no details of the vulnerability are provided at this tim...

6.5CVSS8.9AI score0.01703EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/27 1:15 p.m.3 views

DEBIAN-CVE-2020-1769

In the login screens in agent and customer interface, Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: OTRS Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions...

4.3CVSS5.4AI score0.01254EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/10 8:15 p.m.4 views

CVE-2020-0031

In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed f...

5CVSS6.6AI score0.00157EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/10 8:15 p.m.18 views

CVE-2020-0031

In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed f...

5CVSS4.8AI score0.00157EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/10 8:15 p.m.21 views

Information disclosure

In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed f...

4.7CVSS5.5AI score0.00157EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/03/10 7:55 p.m.55 views

CVE-2020-0031

Technical details for CVE-2020-0031 are not publicly provided in the supplied documents. Monitor for updates.

5CVSS4.8AI score0.00157EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/03/10 7:55 p.m.32 views

CVE-2020-0031

In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to display sensitive information to the user inappropriately. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed f...

5.1AI score0.00157EPSS
SaveExploits0References1
Apple
Apple
added 2020/01/28 12:0 a.m.237 views

About the security content of Safari 13.0.5

About the security content of Safari 13.0.5 This document describes the security content of Safari 13.0.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

9.3CVSS8.7AI score0.027EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/12/16 4:15 p.m.4 views

CVE-2019-4444

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453...

5.5CVSS6.1AI score0.00303EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/12/16 12:0 a.m.6 views

IBM API Connect Information Disclosure Vulnerability (CNVD-2019-46451)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. An information disclosure vulnerability exists in IBM API Connect versions 2018.1 through...

5.5CVSS6.4AI score0.00303EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.8 views

The vulnerability of Google Chrome, related to the insecure processing of credit card data during autofilling, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome relates to the insecure processing of credit card data during automatic filling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.1AI score0.01848EPSS
SaveExploits0References8Affected Software2
OSV
OSV
added 2019/11/25 3:15 p.m.0 views

DEBIAN-CVE-2019-5848

Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS6.5AI score0.0049EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/25 3:15 p.m.5 views

UBUNTU-CVE-2019-5848

Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS6.8AI score0.0049EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/25 2:22 p.m.254 views

CVE-2019-5848

CVE-2019-5848 in Google Chrome/Chromium: incorrect font handling in autofill allows an attacker to potentially read sensitive process-memory contents via a crafted HTML page. Affected: Chrome/Chromium before 75.0.3770.142. CVEs and advisories in the connected docs confirm this is an information-d...

6.5CVSS6.4AI score0.0049EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/11/25 2:22 p.m.50 views

CVE-2019-5848

Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS6.6AI score0.0049EPSS
SaveExploits0
Rows per page
Query Builder