Lucene search
+L

3315 matches found

BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•24 views

Google Chrome Security Configuration Unauthorized Access

The vulnerability of Google Chrome is related to security settings errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to local files through a specially created Chrome extension...

7.8CVSS7.1AI score0.01178EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•17 views

Google Chrome DevTools Local File Access

The vulnerability of the DevTools set of tools in the Google Chrome browser is related to the absence of the “Allow access to file URLs” option. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to local files through a specially created Chrome...

7.8CVSS7.4AI score0.01044EPSS
SaveExploits0References8Affected Software2
NVD
NVD
•added 2019/11/26 5:15 a.m.•39 views

CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

6.5CVSS6.2AI score0.16142EPSS
SaveExploits3References5
osv_debian
osv_debian
•added 2019/11/26 5:15 a.m.•24 views

DEBIAN-CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

6.5CVSS6.7AI score0.16142EPSS
SaveExploits3References1
Prion
Prion
•added 2019/11/26 5:15 a.m.•20 views

Directory traversal

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

4CVSS6.6AI score0.16142EPSS
SaveExploits3References5Affected Software2
osv_ubuntu
osv_ubuntu
•added 2019/11/26 5:15 a.m.•21 views

UBUNTU-CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

6.5CVSS6AI score0.16142EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
•added 2019/11/26 5:15 a.m.•33 views

CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

6.5CVSS6.7AI score0.16142EPSS
SaveExploits3References1
Mend
Mend
•added 2019/11/26 4:49 a.m.•8 views

CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

7.1CVSS0.16142EPSS
SaveExploits3References6
Debian CVE
Debian CVE
•added 2019/11/26 4:49 a.m.•53 views

CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

6.5CVSS4.3AI score0.16142EPSS
SaveExploits3
Cvelist
Cvelist
•added 2019/11/26 4:49 a.m.•47 views

CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request...

6.2AI score0.16142EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2019/11/26 12:00 a.m.•2 views

PT-2019-6692

Name of the Vulnerable Software and Affected Versions Yaws version 1.91 Description The issue arises from the way certain URLs are processed, allowing a remote authenticated user to exploit a directory traversal flaw. This could enable the user to obtain the content of arbitrary local files by...

6.5CVSS0.16142EPSS
SaveExploits3References13
NVD
NVD
•added 2019/11/25 3:15 p.m.•15 views

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS6.8AI score0.00593EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/11/25 3:15 p.m.•18 views

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS8.4AI score0.00593EPSS
SaveExploits0References2
Prion
Prion
•added 2019/11/25 3:15 p.m.•16 views

Design/Logic Flaw

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

4.3CVSS6.6AI score0.00593EPSS
SaveExploits0References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2019/11/25 3:15 p.m.•9 views

UBUNTU-CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS6.9AI score0.00593EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/11/25 3:15 p.m.•21 views

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS6.9AI score0.00593EPSS
SaveExploits0References1
Mend
Mend
•added 2019/11/25 2:22 p.m.•4 views

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

7.1CVSS0.00593EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2019/11/25 2:22 p.m.•32 views

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS7.3AI score0.00593EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/11/25 2:22 p.m.•33 views

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.8AI score0.00593EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/25 12:00 a.m.•3 views

CVE-2019-5879: Incorrect Authorization

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

6.5CVSS6.8AI score0.00593EPSS
SaveExploits0References2
Rows per page
Query Builder