Lucene search
+L

1852 matches found

Tenable Nessus
Tenable Nessus
added 2018/04/25 12:00 a.m.38 views

FreeBSD : chromium -- vulnerability (36ff7a74-47b1-11e8-a7d6-54e1ad544088)

Google Chrome Releases reports : 62 security fixes in this release : - 826626 Critical CVE-2018-6085: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-28 - 827492 Critical CVE-2018-6086: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-30 - 813876 High...

8.8CVSS7AI score0.09186EPSS
SaveExploits6References36
CNVD
CNVD
added 2018/04/24 12:00 a.m.9 views

Apple SafarS and iOS Safari Login AutoFill Information Disclosure Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari Login AutoFill is one of the auto-fill field component. A security...

7.5CVSS6.4AI score0.02299EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/04/24 12:00 a.m.31 views

RHEL 6 : chromium-browser (RHSA-2018:1195)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1195 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 66.0.3359.117. Security Fixes:...

8.8CVSS7.3AI score0.09186EPSS
SaveExploits4References67
RedHat Linux
RedHat Linux
added 2018/04/23 12:36 p.m.11 views

chromium-browser: Confusing autofill settings

Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.4AI score0.01948EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2018/04/21 1:59 p.m.8 views

Flaw in LinkedIn AutoFill Plugin Lets Third-Party Sites Steal Your Data

Not just Facebook, a new vulnerability discovered in Linkedin's popular AutoFill functionality found leaking its users' sensitive information to third party websites without the user even knowing about it. LinkedIn provides an AutoFill plugin for a long time that other websites can use to let...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/04/21 1:59 p.m.109 views

Flaw in LinkedIn AutoFill Plugin Lets Third-Party Sites Steal Your Data

Not just Facebook, a new vulnerability discovered in Linkedin's popular AutoFill functionality found leaking its users' sensitive information to third party websites without the user even knowing about it. LinkedIn provides an AutoFill plugin for a long time that other websites can use to let...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2018/04/18 9:20 a.m.21 views

CVE-2018-6117

Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS2.9AI score0.01948EPSS
SaveExploits0References2
Prion
Prion
added 2018/04/03 6:29 a.m.20 views

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement...

5CVSS6.2AI score0.02299EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2018/04/03 6:00 a.m.38 views

CVE-2018-4137

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement...

6.9AI score0.02299EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2018/04/02 12:00 a.m.49 views

Apple Safari Security Updates (HT208695)

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

8.8CVSS6.6AI score0.37844EPSS
SaveExploits8References1
Apple
Apple
added 2018/03/29 12:00 a.m.153 views

About the security content of Safari 11.1

About the security content of Safari 11.1 This document describes the security content of Safari 11.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS9.2AI score0.37844EPSS
SaveExploits8References1Affected Software1
RedHat Linux
RedHat Linux
added 2018/02/01 4:06 p.m.10 views

chromium-browser: insufficient user gesture requirements in autofill

Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page...

6.5CVSS7.4AI score0.01597EPSS
SaveExploits0References5
CNVD
CNVD
added 2018/01/31 12:00 a.m.19 views

Google Chrome for Mac, Windows and Linux autofil security bypass vulnerability

Google Chrome for Mac, Windows and Linux is the United States Google Google company developed a Mac, Windows and Linux platform based on the Web browser. autofil is one of the autofill form plug-ins. A security vulnerability exists in autofil in versions of Google Chrome prior to 64.0.3282.119 fo...

6.5CVSS8.7AI score0.01597EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2018/01/25 9:22 a.m.21 views

CVE-2018-6037

Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page...

6.5CVSS3.5AI score0.01597EPSS
SaveExploits0References2
OSV
OSV
added 2017/10/27 5:29 a.m.8 views

CVE-2017-5082

Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page...

5.5CVSS7.3AI score0.00378EPSS
SaveExploits0References7
OSV
OSV
added 2017/10/27 5:29 a.m.3 views

CVE-2017-5080

A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS7.3AI score0.01322EPSS
SaveExploits0References6
NVD
NVD
added 2017/10/27 5:29 a.m.17 views

CVE-2017-5080

A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS8.5AI score0.01322EPSS
SaveExploits0References6
Prion
Prion
added 2017/10/27 5:29 a.m.18 views

Design/Logic Flaw

Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page...

2.1CVSS5.4AI score0.00378EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
added 2017/10/27 5:29 a.m.26 views

CVE-2017-5080

A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS7.2AI score0.01322EPSS
SaveExploits0References2
OSV
OSV
added 2017/10/27 5:29 a.m.18 views

UBUNTU-CVE-2017-5080

A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS7.3AI score0.01322EPSS
SaveExploits0References3
Rows per page
Query Builder