Lucene search
+L

1854 matches found

CNVD
CNVD
added 2020/12/15 12:00 a.m.35 views

Unspecified Vulnerability in Mozilla FireFox (CNVD-2021-00393)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 83, which stems from the fact that a cross-domain iframe containing a login form may have been recognized and populated by the login...

6.1CVSS8.7AI score0.00698EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/09 1:15 a.m.22 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS5.6AI score0.00698EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/09 1:15 a.m.7 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.9AI score0.00698EPSS
SaveExploits0References2
CVE
CVE
added 2020/12/09 12:24 a.m.169 views

CVE-2020-26962

CVE-2020-26962 affects Mozilla Firefox up to version 82 (Firefox

6.1CVSS6.4AI score0.00698EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2020/12/09 12:24 a.m.87 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.7AI score0.00698EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/12/09 12:24 a.m.37 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.6AI score0.00698EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2020/12/09 12:24 a.m.78 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS8.1AI score0.00698EPSS
SaveExploits0
Veracode
Veracode
added 2020/11/20 9:45 a.m.33 views

Phishing Attacks

firefox is vulnerable to phishing attacks. The vulnerability exists through cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated...

6.1CVSS2.7AI score0.00698EPSS
SaveExploits0References3Affected Software6
OpenVAS
OpenVAS
added 2020/11/18 12:00 a.m.40 views

Mozilla Firefox Security Advisories (MFSA2020-50, MFSA2020-52) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

9.6CVSS7.2AI score0.44303EPSS
SaveExploits3References1
CNNVD
CNNVD
added 2020/11/17 12:00 a.m.16 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 83, which stems from the fact that a cross-domain iframe containing a login form may have been recognized and populated by the login...

6.1CVSS6.8AI score0.00698EPSS
SaveExploits0References5
OSV
OSV
added 2020/11/17 12:00 a.m.13 views

UBUNTU-CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.7AI score0.00698EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2020/11/17 12:00 a.m.36 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.8AI score0.00698EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/05 12:00 a.m.81 views

Security update for chromium, gn (important)

openSUSE Security Update: Security update for chromium, gn Announcement ID: openSUSE-SU-2020:1829-1 Rating: important References: 1177408 1177936 1178375 Cross-References: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974...

9.6CVSS9.4AI score0.48293EPSS
SaveExploits12References3
OSV
OSV
added 2020/11/03 3:15 a.m.2 views

DEBIAN-CVE-2020-15990

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS8.4AI score0.014EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/03 3:15 a.m.5 views

UBUNTU-CVE-2020-15990

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS5.8AI score0.014EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/03 3:15 a.m.20 views

Double free

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

6.8CVSS8.7AI score0.014EPSS
SaveExploits0References7Affected Software4
Cvelist
Cvelist
added 2020/11/03 2:21 a.m.31 views

CVE-2020-15990

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8AI score0.014EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2020/10/13 8:22 a.m.6 views

chromium-browser: Use after free in autofill

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS7.4AI score0.014EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2020/10/07 9:36 a.m.35 views

CVE-2020-15990

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS2.7AI score0.014EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2020/10/06 12:00 a.m.42 views

chromium -- multiple vulnerabilities

Chrome releases reports: This release contains 35 security fixes, including: 1127322 Critical CVE-2020-15967: Use after free in payments. Reported by Man Yue Mo of GitHub Security Lab on 2020-09-11 1126424 High CVE-2020-15968: Use after free in Blink. Reported by Anonymous on 2020-09-09 1124659...

8.8CVSS1AI score0.02482EPSS
SaveExploits4References1
Rows per page
Query Builder