Lucene search
+L

81 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.4 views

SUSE CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

7.5CVSS8.8AI score0.0167EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
added 2023/02/15 3:35 a.m.5 views

SUSE CVE-2022-0111

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page...

6.5CVSS6.7AI score0.00793EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.11 views

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows attackers to carry out spoofing attacks.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

5CVSS6.4AI score0.00752EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:0 a.m.9 views

The vulnerability of the Google Chrome browser’s Navigation function, which allows a hacker to disclose protected information

The vulnerability of the Google Chrome browser’s Navigation function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information through a specially created web page...

7.1CVSS7AI score0.01169EPSS
SaveExploits1References14Affected Software6
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.8 views

CVE-2022-0108

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01169EPSS
SaveExploits1References19
OSV
OSV
added 2022/02/12 12:15 a.m.2 views

DEBIAN-CVE-2022-0111

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page...

6.5CVSS7.5AI score0.00793EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2021-0551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.0202EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/01/04 12:0 a.m.3 views

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome Navigation, which can be exploited by attackers to bypass security restrictions...

6.5CVSS8.1AI score0.01169EPSS
SaveExploits1References23
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.8 views

The vulnerability of the Navigation component in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Navigation component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

9.4CVSS6.9AI score0.00783EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.16 views

The vulnerability of Google Chrome’s navigation mechanism, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s navigation function is related to the insufficient implementation of security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

6.5CVSS7AI score0.01874EPSS
SaveExploits1References12Affected Software5
OSV
OSV
added 2021/04/26 5:15 p.m.7 views

CVE-2021-21226

Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS9.4AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.10 views

The vulnerability of the navigation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security restrictions.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created web page...

10CVSS7.5AI score0.01473EPSS
SaveExploits0References8Affected Software4
OSV
OSV
added 2021/03/11 5:15 p.m.5 views

CVE-2021-27679

Cross-site scripting XSS vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name...

5.4CVSS6.2AI score0.00601EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/09 3:15 p.m.8 views

CVE-2021-21146

Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS9.4AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2019/11/06 4:43 p.m.7 views

chromium-browser: URL spoof in navigation

Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS7.4AI score0.0092EPSS
SaveExploits0References5
CNVD
CNVD
added 2019/01/14 12:0 a.m.9 views

Unspecified Vulnerability in Google Chrome Navigation

Google Chrome is a web browser developed by Google, Inc.Navigation is one of the browser navigation modules. A security vulnerability exists in Navigation in Google Chrome versions prior to 71.0.3578.80. The vulnerability can be exploited by a remote attacker with a specially crafted HTML page th...

4.3CVSS8.7AI score0.00471EPSS
SaveExploits0References1
NVD
NVD
added 2018/12/07 4:29 p.m.26 views

CVE-2018-1896

IBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. IBM X-Force ID: 152456...

5.4CVSS5AI score0.00968EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/12/06 12:0 a.m.7 views

Google Chrome Navigation Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google, Inc.Navigation is one of the browser navigation modules. A security vulnerability exists in Navigation in versions of Google Chrome prior to 71.0.3578.80, which stems from insufficient policy enforcement. The vulnerability can be exploited by a...

6.5CVSS8.5AI score0.0255EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2012/10/10 5:55 p.m.29 views

CVE-2012-5354

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has multiple menus of SELECT elements active, which allows remote attackers to conduct clickjacking attacks via vectors involving an XPI file, the window.ope...

6.8CVSS5.9AI score0.01678EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2012/10/10 5:0 p.m.32 views

CVE-2012-3984

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to spoof page content via vectors involving absolute positioning and scrolling...

9.1AI score0.02246EPSS
SaveExploits0References10
Rows per page
Query Builder