Lucene search
K

2060 matches found

AlpineLinux
AlpineLinux
added 2021/03/31 1:41 p.m.37 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS6.8AI score0.01397EPSS
Exploits0
Veracode
Veracode
added 2021/03/25 1:22 a.m.19 views

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to the Devtools remote debugging feature which could be enabled in a way that was unnoticable to the user, which allow an attacker to make direct network connection to the victim to monitor the user's browsing activity...

6.5CVSS2.4AI score0.01397EPSS
Exploits0References4Affected Software7
OSV
OSV
added 2021/03/25 12:0 a.m.1 views

UBUNTU-CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS6.8AI score0.01397EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/03/23 12:0 a.m.46 views

Mozilla Firefox < 87.0

"The version of Firefox installed on the remote Windows host is prior to 87.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-10 advisory. - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 86. Some of these...

8.8CVSS8.3AI score0.01852EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.2 views

The vulnerability of the DevTools set of tools in the Google Chrome web browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

7.3CVSS6.9AI score0.05919EPSS
Exploits1References13Affected Software7
Kitploit
Kitploit
added 2021/02/19 11:30 a.m.56 views

Galer - A Fast Tool To Fetch URLs From HTML Attributes By Crawl-In

A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Installation from Binary The installation is easy. You can download a prebuilt bina...

6.9AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:0 a.m.1 views

The vulnerability of the DevTools set of tools in the Google Chrome web browser allows a hacker to escape from the isolated software environment.

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to exit from a isolated software environment...

7.3CVSS7AI score0.05919EPSS
Exploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:0 a.m.3 views

The vulnerability of the DevTools set of tools in the Google Chrome web browser allows a hacker to bypass existing security restrictions.

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

7.3CVSS7.7AI score0.23406EPSS
Exploits0References12Affected Software7
OSV
OSV
added 2021/02/09 2:15 p.m.1 views

DEBIAN-CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS8.4AI score0.23406EPSS
Exploits0References1
OSV
OSV
added 2021/02/09 2:15 p.m.1 views

DEBIAN-CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

6.5CVSS7.1AI score0.05919EPSS
Exploits1References1
OSV
OSV
added 2021/02/09 2:15 p.m.7 views

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS8.9AI score0.23406EPSS
Exploits0References3
OSV
OSV
added 2021/02/09 2:15 p.m.1 views

DEBIAN-CVE-2021-21138

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file...

8.6CVSS8.2AI score0.0051EPSS
Exploits0References1
NVD
NVD
added 2021/02/09 2:15 p.m.18 views

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS0.23406EPSS
Exploits0References3
NVD
NVD
added 2021/02/09 2:15 p.m.20 views

CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

6.5CVSS0.05919EPSS
Exploits1References3
NVD
NVD
added 2021/02/09 2:15 p.m.12 views

CVE-2021-21138

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file...

8.6CVSS0.0051EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/02/09 2:15 p.m.35 views

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS7.2AI score0.23406EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/02/09 2:15 p.m.32 views

CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

6.5CVSS7AI score0.05919EPSS
Exploits1References1
Prion
Prion
added 2021/02/09 2:15 p.m.20 views

Information disclosure

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

6.8CVSS8.7AI score0.23406EPSS
Exploits0References3Affected Software2
Prion
Prion
added 2021/02/09 2:15 p.m.18 views

Design/Logic Flaw

Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file...

6.8CVSS8.8AI score0.0051EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/02/09 2:15 p.m.0 views

UBUNTU-CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS7.3AI score0.23406EPSS
Exploits0References2
Rows per page
Query Builder