Lucene search
+L

6926 matches found

Qualys Blog
Qualys Blog
added 2024/02/26 5:28 p.m.18 views

A Comprehensive Assessment of the General Personal Data Protection Law (LGPD)

Most nations need to protect sensitive data for any number of reasons. Assuring legal compliance, protecting national security, preventing abuse and prejudice, improving global competitiveness, and upholding ethical standards are all vital requirements. Data privacy enhances the safety, security,...

6.9AI score
SaveExploits0
Veracode
Veracode
added 2024/02/26 8:26 a.m.20 views

Insufficient Policy Enforcement

chromium is vulnerable to Insufficient Policy Enforcement. The vulnerability is due to the failure to enforce filesystem restrictions adequately. It can allows a remote attacker to bypass filesystem restrictions and can be exploits remotely via a crafted HTML page...

8.8CVSS6.8AI score0.10507EPSS
SaveExploits1References5Affected Software1
The Hacker News
The Hacker News
added 2024/02/26 4:57 a.m.83 views

LockBit Ransomware Group Resurfaces After Law Enforcement Takedown

The threat actors behind the LockBit ransomware operation have resurfaced on the dark web using new infrastructure, days after an international law enforcement exercise seized control of its servers. To that end, the notorious group has moved its data leak portal to a new .onion address on the TO...

9.8CVSS9.4AI score0.21132EPSS
SaveExploits3
The Hacker News
The Hacker News
added 2024/02/25 8:53 a.m.33 views

Authorities Claim LockBit Admin "LockBitSupp" Has Engaged with Law Enforcement

LockBitSupp, the individuals behind the persona representing the LockBit ransomware service on cybercrime forums such as Exploit and XSS, "has engaged with law enforcement," authorities said. The development comes following the takedown of the prolific ransomware-as-a-service RaaS operation as pa...

6.5AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/02/23 6:57 p.m.40 views

Chromium: CVE-2024-1675 Insufficient policy enforcement in Download

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.10507EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/02/23 12:0 a.m.35 views

Debian dsa-5629 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5629 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5629-1...

9.8CVSS7.7AI score0.18696EPSS
SaveExploits6References18
The Hacker News
The Hacker News
added 2024/02/22 5:26 a.m.32 views

U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

The U.S. State Department has announced monetary rewards of up to $15 million for information that could lead to the identification of key leaders within the LockBit ransomware group and the arrest of any individual participating in the operation. "Since January 2020, LockBit actors have executed...

9.7AI score
SaveExploits0
OSV
OSV
added 2024/02/21 4:15 a.m.20 views

CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.2AI score
SaveExploits0References4
NVD
NVD
added 2024/02/21 4:15 a.m.24 views

CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.4AI score0.10507EPSS
SaveExploits1References4
Prion
Prion
added 2024/02/21 4:15 a.m.28 views

Authorization

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

6.3AI score0.10507EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2024/02/21 4:15 a.m.40 views

CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.2AI score0.10507EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/02/21 3:14 a.m.21 views

CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.10507EPSS
SaveExploits1References4
CVE
CVE
added 2024/02/21 3:14 a.m.6948 views

CVE-2024-1675

CVE-2024-1675 affects Google Chrome/Chromium prior to version 122.0.6261.57. The vulnerability stems from insufficient policy enforcement in the Chrome Download pathway, enabling a remote attacker to bypass filesystem restrictions via a crafted HTML page. The issue is categorized as high severity...

8.8CVSS4.8AI score0.10507EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/02/21 3:14 a.m.27 views

CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

5.2AI score0.10507EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2024/02/21 12:0 a.m.31 views

Google Chrome Security Update (stable-channel-update-for-desktop_20-2024-02) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.8CVSS7.2AI score0.18696EPSS
SaveExploits6References1
Wired Threat Level
Wired Threat Level
added 2024/02/20 12:50 p.m.13 views

The Notorious Lockbit Ransomware Gang Has Been Disrupted by Law Enforcement

LockBit’s website, infrastructure, and data have been seized by law enforcement—striking a huge blow against one of the world’s most prolific ransomware groups...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/02/20 5:25 a.m.50 views

LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement Raid

Update: The U.K. National Crime Agency NCA has confirmed the takedown of LockBit infrastructure. Read here for more details. An international law enforcement operation has led to the seizure of multiple darknet domains operated by LockBit, one of the most prolific ransomware groups, marking the...

9.8CVSS9.8AI score0.21132EPSS
SaveExploits3
Malwarebytes
Malwarebytes
added 2024/02/20 12:7 a.m.19 views

LockBit, the world’s worst ransomware, is down

For the last two years the absolute worst, most prolific, most globally significant "big game" ransomware gang has been LockBit. This evening its position as ransomwares biggest beast is suddenly in doubt, following some non-consensual website redecoration at the hands of the UKs National Crime...

7.2AI score
SaveExploits0
FreeBSD
FreeBSD
added 2024/02/20 12:0 a.m.31 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 41495060 High CVE-2024-1669: Out of bounds memory access in Blink. Reported by Anonymous on 2024-01-26 41481374 High CVE-2024-1670: Use after free in Mojo. Reported by Cassidy Kim@cassidy6564 on 2023-12-06 41487933 Medium...

9.8CVSS7AI score0.18696EPSS
SaveExploits6References1
CNNVD
CNNVD
added 2024/02/20 12:0 a.m.9 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 122.0.6261.57, which stemmed from insufficient policy enforcement in the Download module...

8.8CVSS9AI score0.10507EPSS
SaveExploits1References5
Rows per page
Query Builder