Lucene search
+L

686 matches found

OSV
OSV
added 2021/08/31 5:15 p.m.18 views

CVE-2021-22929

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...

6.1CVSS6.3AI score
SaveExploits0References1
Prion
Prion
added 2021/08/31 5:15 p.m.15 views

Information disclosure

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...

3.6CVSS6AI score0.00405EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
added 2021/08/31 5:15 p.m.8 views

CVE-2021-22929

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...

6.1CVSS6.3AI score0.00405EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/08/31 4:53 p.m.29 views

CVE-2021-22929

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...

6.2AI score0.00405EPSS
SaveExploits1References1
CVE
CVE
added 2021/08/31 4:53 p.m.76 views

CVE-2021-22929

Brave Browser Desktop 1.28.62 and earlier versions are affected by CVE-2021-22929, an information disclosure where warning logs included timestamps of connections to V2 onion domains in tor.log. Root cause: on-disk logging of v2 onion service access warnings. Remediation: update Brave to 1.28.62 ...

6.1CVSS5.9AI score0.00405EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/08/31 12:00 a.m.13 views

Brave 日志信息泄露漏洞

Brave is a fast, private and secure web browser from Brave, Inc. Brave Browser Desktop 1.28.62 and earlier versions have a security vulnerability that could be exploited by attackers to obtain "V2 onion domains"...

6.1CVSS5.6AI score0.00405EPSS
SaveExploits1References2
Hacker One
Hacker One
added 2021/08/23 5:34 p.m.90 views

Brave Software: unclaimed s3 bucket takeover in the 3 js file located on the github page of brave software

Summary: There is a unclaimed s3 bucket i.e brave-extensions.s3.amazonaws.com located in the 3 .js file on official brave software github page https://github.com/search?q=org%3Abrave+brave-extensions+language%3AJavaScript&type=Codethe attacker can takeover the bucket and create file that is used ...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/08/16 12:00 a.m.5 views

PT-2021-15281 · Brave +1 · Brave Browser +1

Name of the Vulnerable Software and Affected Versions: Brave Browser Desktop versions prior to 1.28.62 Description: An information disclosure issue exists where logged warning messages include timestamps of connections to V2 onion domains in tor.log. This issue affects versions prior to 1.28.62,...

6.1CVSS6AI score0.00405EPSS
SaveExploits1References15
HackRead
HackRead
added 2021/08/04 1:09 p.m.51 views

Fake Brave browser website dropped malware, thanks to Google Ads

By Waqas Threat actors used Google Ads to buy top search results on Google to advertise fake Brave browser websites which delivered malware as the browser's download file. This is a post from HackRead.com Read the original post: Fake Brave browser website dropped malware, thanks to Google Ads...

2.1AI score
SaveExploits0
NVD
NVD
added 2021/07/12 11:15 a.m.64 views

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

5.9CVSS0.02993EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/12 11:15 a.m.20 views

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

5.9CVSS6.4AI score
SaveExploits0References1
OSV
OSV
added 2021/07/12 11:15 a.m.22 views

CVE-2021-22917

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...

6.5CVSS6.4AI score
SaveExploits0References1
NVD
NVD
added 2021/07/12 11:15 a.m.29 views

CVE-2021-22917

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...

6.5CVSS0.0123EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2021/07/12 11:15 a.m.8 views

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

5.9CVSS6.6AI score0.02993EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/12 11:15 a.m.24 views

Information disclosure

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

4.3CVSS6.3AI score0.02993EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
added 2021/07/12 11:15 a.m.7 views

CVE-2021-22917

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...

6.5CVSS6.6AI score0.0123EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/12 11:15 a.m.28 views

Information disclosure

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...

4.3CVSS6.2AI score0.0123EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/12 10:22 a.m.44 views

CVE-2021-22917

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...

6.5AI score0.0123EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/12 10:22 a.m.71 views

CVE-2021-22917

Brave Browser Desktop versions 1.17–1.20 are affected by an information-disclosure vulnerability where DNS requests in Tor windows do not flow through Tor when adblocking is enabled, leaking the user’s real IP (and DNS queries) to external DNS servers/IPs. The Red Hat and other sources corroborat...

6.5CVSS6.2AI score0.0123EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/12 10:22 a.m.58 views

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

6.2AI score0.02993EPSS
SaveExploits0References1
Rows per page
Query Builder