Lucene search
+L

9451 matches found

OSV
OSV
added 2019/12/10 10:15 p.m.2 views

UBUNTU-CVE-2019-13744

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.2AI score0.01426EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2019/12/10 10:15 p.m.24 views

CVE-2019-13744

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.01426EPSS
SaveExploits0References3
Prion
Prion
added 2019/12/10 10:15 p.m.19 views

Design/Logic Flaw

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01426EPSS
SaveExploits0References10Affected Software7
OSV
OSV
added 2019/12/10 10:15 p.m.3 views

UBUNTU-CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS6.8AI score0.01219EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2019/12/10 10:15 p.m.22 views

CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS6.8AI score0.01219EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/12/10 9:1 p.m.39 views

CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS5.8AI score0.01219EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/12/10 9:1 p.m.30 views

CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.9AI score0.01219EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2019/12/10 9:1 p.m.40 views

CVE-2019-13745

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01505EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2019/12/10 9:1 p.m.45 views

CVE-2019-13744

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01426EPSS
SaveExploits0
CVE
CVE
added 2019/12/10 9:1 p.m.266 views

CVE-2019-13745

CVE-2019-13745 affects Google Chrome (Chromium) prior to 79.0.3945.79. It is a policy enforcement error in the audio component that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The entry lists the vulnerable condition and version range but does not provide expl...

6.5CVSS6.2AI score0.01505EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
added 2019/12/10 9:1 p.m.25 views

CVE-2019-13745

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.4AI score0.01505EPSS
SaveExploits1References10
CVE
CVE
added 2019/12/10 9:1 p.m.245 views

CVE-2019-13744

CVE-2019-13744 affects Google Chrome before 79.0.3945.79, where insufficient policy enforcement in cookies could enable a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rooted in cookie policy handling within Chrome; several advisories reference this CVE as part o...

6.5CVSS6.2AI score0.01426EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2019/12/10 9:1 p.m.27 views

CVE-2019-13744

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.4AI score0.01426EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability in the implementation of the CORS mechanism for the Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

6.5CVSS7.1AI score0.00867EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.18 views

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome relates to bypassing the CORS Cross-origin resource sharing mechanism. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.2AI score0.00787EPSS
SaveExploits0References8Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/12/06 12:0 a.m.39 views

NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2019-0210)

The remote NewStart CGSL host, running version MAIN 4.06, has firefox packages installed that are affected by multiple vulnerabilities: - Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory...

9.8CVSS7.9AI score0.20271EPSS
SaveExploits2References9
NVD
NVD
added 2019/12/05 6:15 p.m.37 views

CVE-2019-18381

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

6.5CVSS6.3AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/05 6:15 p.m.3 views

CVE-2019-19545

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

6.3CVSS5.6AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/05 6:15 p.m.5 views

CVE-2019-18381

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

6.3CVSS6.4AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/05 6:15 p.m.14 views

Cross site scripting

Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...

6.5CVSS6.2AI score0.0034EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder