Lucene search
+L

5366 matches found

CVE
CVE
•added 2019/12/10 9:01 p.m.•286 views

CVE-2019-13745

CVE-2019-13745 affects Google Chrome (Chromium) prior to 79.0.3945.79. It is a policy enforcement error in the audio component that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The entry lists the vulnerable condition and version range but does not provide expl...

6.5CVSS6.2AI score0.01505EPSS
SaveExploits1References10Affected Software1
Positive Technologies
Positive Technologies
•added 2019/12/10 12:00 a.m.•5 views

PT-2019-4856

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to insufficient policy enforcement in audio processing, allowing a remote attacker to leak cross-origin data via a specially crafted HTML page. This could enable the...

7.1CVSS0.01505EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2019/12/10 12:00 a.m.•4 views

PT-2019-5134

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to insufficient policy enforcement in payments in Google Chrome, which is connected to a lack of input validation mechanism. This can be exploited by a remote attack...

7.1CVSS0.01219EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/10 12:00 a.m.•4 views

CVE-2019-13744: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.7AI score0.01426EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/10 12:00 a.m.•2 views

CVE-2019-13745: Undefined Security Weakness

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.7AI score0.01505EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/10 12:00 a.m.•4 views

CVE-2019-13763: Undefined Security Weakness

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01219EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/25 3:15 p.m.•5 views

DEBIAN-CVE-2019-5880

Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

7.4CVSS7.1AI score0.00877EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/25 3:15 p.m.•8 views

CVE-2019-5880

Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

7.4CVSS8.4AI score
SaveExploits0References2
NVD
NVD
•added 2019/11/25 3:15 p.m.•15 views

CVE-2019-5880

Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

7.4CVSS7.3AI score0.00877EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/25 3:15 p.m.•5 views

DEBIAN-CVE-2019-13713

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.0114EPSS
SaveExploits0References1
NVD
NVD
•added 2019/11/25 3:15 p.m.•16 views

CVE-2019-13711

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.3CVSS5.6AI score0.0118EPSS
SaveExploits0References3
NVD
NVD
•added 2019/11/25 3:15 p.m.•19 views

CVE-2019-13713

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.4AI score0.0114EPSS
SaveExploits0References3
OSV
OSV
•added 2019/11/25 3:15 p.m.•16 views

CVE-2019-13711

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.3CVSS7.9AI score
SaveExploits0References3
OSV
OSV
•added 2019/11/25 3:15 p.m.•6 views

DEBIAN-CVE-2019-13711

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.3CVSS6.7AI score0.0118EPSS
SaveExploits0References1
NVD
NVD
•added 2019/11/25 3:15 p.m.•21 views

CVE-2019-13697

Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.00766EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/25 3:15 p.m.•21 views

CVE-2019-13705

Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS8AI score
SaveExploits0References3
OSV
OSV
•added 2019/11/25 3:15 p.m.•7 views

DEBIAN-CVE-2019-13705

Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS6.7AI score0.00584EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/25 3:15 p.m.•7 views

DEBIAN-CVE-2019-13684

Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.3CVSS7.2AI score0.00839EPSS
SaveExploits0References1
NVD
NVD
•added 2019/11/25 3:15 p.m.•18 views

CVE-2019-13683

Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.7AI score0.00877EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/25 3:15 p.m.•16 views

CVE-2019-13684

Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.3CVSS8.4AI score
SaveExploits0References2
Rows per page
Query Builder