Lucene search
+L

3979 matches found

OSV
OSV
•added 2022/11/30 12:15 a.m.•9 views

UBUNTU-CVE-2022-4195

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...

4.3CVSS6.2AI score0.00502EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/11/30 12:00 a.m.•55 views

Google Chrome Security Bypass Vulnerability (CNVD-2023-04548)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is caused by insufficient policy enforcement in secure browsing. An attacker can exploit this vulnerability to bypass security restrictions...

4.3CVSS5.7AI score0.00502EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/30 12:00 a.m.•16 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is caused by insufficient policy enforcement in secure browsing. An attacker can exploit this vulnerability to bypass security restrictions...

4.3CVSS8.6AI score0.00502EPSS
SaveExploits0References7
CVE
CVE
•added 2022/11/29 12:00 a.m.•218 views

CVE-2022-4195

CVE-2022-4195 stems from insufficient policy enforcement in Safe Browsing within Google Chrome. The vulnerability allows a remote attacker to bypass Safe Browsing warnings via a malicious file, affecting Chrome versions prior to 108.0.5359.71. The Chrome 108 release notes acknowledge this and lis...

4.3CVSS5AI score0.00502EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/11/29 12:00 a.m.•71 views

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

8.8CVSS7.2AI score0.23918EPSS
SaveExploits1References45
Debian CVE
Debian CVE
•added 2022/11/29 12:00 a.m.•47 views

CVE-2022-4195

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...

4.3CVSS6.1AI score0.00502EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/29 12:00 a.m.•0 views

CVE-2022-4195: Undefined Security Weakness

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00502EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2022/11/29 12:00 a.m.•51 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 28 security fixes, including: 1379054 High CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao @Kipreyyy on 2022-10-27 1381401 High CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Alpha Lab on...

8.8CVSS0.1AI score0.23918EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2022/11/29 12:00 a.m.•84 views

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

8.8CVSS7.2AI score0.23918EPSS
SaveExploits1References45
Cvelist
Cvelist
•added 2022/11/29 12:00 a.m.•35 views

CVE-2022-4195

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. Chromium security severity: Medium...

5.5AI score0.00502EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/11/21 12:00 a.m.•21 views

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00438EPSS
SaveExploits0References7Affected Software4
Veracode
Veracode
•added 2022/11/19 6:50 p.m.•21 views

Information Disclosure

firefox, sid, is vulnerable to information disclosure. The vulnerability exists in private browsing mode because of private browsing date not properly manage which allows to attacker to access sensitive information in the system...

4.3CVSS6.5AI score0.00409EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
•added 2022/11/17 12:00 a.m.•27 views

Ubuntu: Security Advisory (USN-5726-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.02208EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/11/16 10:29 p.m.•28 views

Use After Free

chromium is vulnerable to use-after free. The vulnerability exists in Safe Browsing in Google Chrome which allows an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

8.8CVSS8.4AI score0.00438EPSS
SaveExploits0References4Affected Software1
Ubuntu
Ubuntu
•added 2022/11/16 1:25 p.m.•61 views

USN-5726-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the contents of the addressbar, bypass security restrictions, cross-site tracing or execute arbitra...

9.8CVSS7.7AI score0.02208EPSS
SaveExploits0
OSV
OSV
•added 2022/11/16 12:02 a.m.•20 views

GHSA-XX6G-JJ35-PXJV Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

Impact Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. Patches Users can upgrade to v4.1.0 Workarounds Set dirbrowser.enable = False in the configuration. For instance, when using a Python dictionary to configure the...

8.2CVSS6.6AI score0.00368EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/11/16 12:02 a.m.•37 views

Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

Impact Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. Patches Users can upgrade to v4.1.0 Workarounds Set dirbrowser.enable = False in the configuration. For instance, when using a Python dictionary to configure the...

8.2CVSS5.6AI score0.00368EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2022/11/16 12:00 a.m.•29 views

CVE-2022-45417

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private...

4.3CVSS6.5AI score0.00409EPSS
SaveExploits0References3
OSV
OSV
•added 2022/11/16 12:00 a.m.•28 views

UBUNTU-CVE-2022-45417

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private...

4.3CVSS6.1AI score0.00409EPSS
SaveExploits0References4
Mozilla
Mozilla
•added 2022/11/15 12:00 a.m.•140 views

Security Vulnerabilities fixed in Firefox 107 — Mozilla

Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have allowed them to determine the presence or length of a media file. Through a series of popup and window.print calls, an...

9.8CVSS8AI score0.01061EPSS
SaveExploits0References21Affected Software1
Rows per page
Query Builder