Lucene search
+L

1629 matches found

CVE
CVE
added 2017/10/27 5:0 a.m.91 views

CVE-2017-5082

CVE-2017-5082 is a Chromium/Google Chrome vulnerability affecting the credit card editor component. Connected sources describe an insufficient validation/memory misreference in the credit card editor, enabling a local attacker to execute code or cause information disclosure when processing crafte...

5.5CVSS5.4AI score0.00378EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2017/10/27 5:0 a.m.25 views

CVE-2017-5082

Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page...

5.6AI score0.00378EPSS
SaveExploits0References7
CVE
CVE
added 2017/10/27 5:0 a.m.104 views

CVE-2017-5080

CVE-2017-5080 is a use-after-free in the chromium credit card autofill component. The initial description states an out-of-bounds memory read on a crafted HTML page could be triggered, affecting Chromium on Linux and Windows before version 59.0.3071.86. Connected documents corroborate that this C...

8.8CVSS8.2AI score0.01322EPSS
SaveExploits0References6Affected Software1
Apple
Apple
added 2017/08/29 2:51 a.m.78 views

About the security content of Safari 10.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

8.8CVSS0.2AI score0.09283EPSS
SaveExploits90Affected Software4
The Hacker News
The Hacker News
added 2017/08/22 2:4 a.m.9 views

Android 8.0 Oreo Released – 11 New Features That Make Android Even Better

While the moon was eclipsing the sun, Google announced the launch of its new mobile operating system called Android 8.0 Oreo in an Eclipse-themed launch event in New York City. Yes, the next version of sugary snack-themed Android and the successor to Android Nougat will now be known as Android...

6.5AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2017/06/08 12:9 a.m.47 views

Security update for chromium (important)

This update to Chromium 59.0.3071.86 fixes the following security issues: - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-5074: Use after free in Apps Bluetooth...

0.6AI score0.31212EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2017/06/08 12:0 a.m.43 views

openSUSE Security Update : chromium (openSUSE-2017-661)

This update to Chromium 59.0.3071.86 fixes the following security issues : - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-5074: Use after free in Apps Bluetoot...

8.8CVSS7.3AI score0.31212EPSS
SaveExploits1References17
Tenable Nessus
Tenable Nessus
added 2017/06/08 12:0 a.m.43 views

Google Chrome < 59.0.3071.86 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 59.0.3071.86. It is, therefore, affected by multiple vulnerabilities as referenced in the 201706stable-channel-update-for-desktop advisory. - A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86...

8.8CVSS7.7AI score0.31212EPSS
SaveExploits1References34
Tenable Nessus
Tenable Nessus
added 2017/06/08 12:0 a.m.39 views

Google Chrome < 59.0.3071.86 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 59.0.3071.86. It is, therefore, affected by multiple vulnerabilities as referenced in the 201706stable-channel-update-for-desktop advisory. - A use after free in credit card autofill in Google Chrome prior to 59.0.3071....

8.8CVSS7.7AI score0.31212EPSS
SaveExploits1References34
CNVD
CNVD
added 2017/06/07 12:0 a.m.5 views

Google Chrome credit card autofill memory misreference vulnerability

Google Chrome is a web browser developed by Google.Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.credit card autofill is one of the features that can automatically add credit card information to a website. credit card information...

8.8CVSS6.7AI score0.01322EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/06/07 12:0 a.m.20 views

Google Chrome < 59.0.3071.86 Multiple Vulnerabilities

Binary data 700131.pasl...

8.8CVSS5.8AI score0.31212EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2017/06/06 7:33 p.m.7 views

chromium-browser: use after free in credit card autofill

A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS7.4AI score0.01322EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2017/06/06 7:58 a.m.36 views

CVE-2017-5080

A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS3.5AI score0.01322EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/06/06 7:57 a.m.42 views

CVE-2017-5082

Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page...

5.5CVSS1.7AI score0.00378EPSS
SaveExploits0References2
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2017/06/05 12:0 a.m.57 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 59 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 59.0.3071.86 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS8.8AI score0.31212EPSS
SaveExploits1Affected Software1
Veracode
Veracode
added 2017/06/01 4:48 a.m.17 views

Autofill Passwords

Moodle is vulnerable to autofilled passwords. The form-autocompletion functionality reveals passwords in a non-password field on the create groups page. This only occurs when used on the safari browser on an iPad device...

2.1CVSS6AI score0.00403EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2017/05/24 12:0 a.m.6 views

Apple Safari Safari Login AutoFill Component Local Security Bypass Vulnerability

Apple Safari is a web browser developed by Apple and is the default browser that comes with Mac OS X and iOS operating systems.Safari Login AutoFill is one of the Safari Login AutoFill components. A security vulnerability exists in the Safari Login AutoFill component in Apple Safari versions prio...

5.5CVSS6.1AI score0.00313EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:0 a.m.17 views

The vulnerability of the Safari browser, which allows a hacker to gain access to cryptographic keys

The vulnerability of the Safari Login AutoFill component in the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain access to cryptographic keys using uncertain vectors...

2.1CVSS6.5AI score0.00313EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2017/04/02 1:59 a.m.18 views

Design/Logic Flaw

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows local users to obtain access to locked keychain items via unspecified vectors...

2.1CVSS4.2AI score0.00313EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/04/02 1:59 a.m.4 views

CVE-2017-2385

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows local users to obtain access to locked keychain items via unspecified vectors...

5.5CVSS5.8AI score0.00313EPSS
SaveExploits0References3
Rows per page
Query Builder