Lucene search
+L

5194 matches found

CNNVD
CNNVD
added 2021/01/20 12:00 a.m.13 views

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

6.5CVSS7AI score0.04743EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.15 views

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A download policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to bypa...

6.5CVSS6.9AI score0.03036EPSS
SaveExploits0References7
CNVD
CNVD
added 2021/01/11 12:00 a.m.8 views

Information leakage vulnerability in the full version of Feifei Movie & TV navigation system

The full version of Fei Fei Movie Navigation System is a free and open source PHP movie program. The full version of Feifei Movie Navigation System suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

6.6AI score
SaveExploits0
NVD
NVD
added 2021/01/08 7:15 p.m.18 views

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS8.3AI score0.00934EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/08 7:15 p.m.9 views

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS8.5AI score
SaveExploits0References2
OSV
OSV
added 2021/01/08 7:15 p.m.3 views

DEBIAN-CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS8.4AI score0.00934EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/08 7:15 p.m.8 views

UBUNTU-CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS7.3AI score0.00934EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/01/08 7:15 p.m.36 views

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS7.2AI score0.00934EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/08 7:15 p.m.17 views

Design/Logic Flaw

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

6.8CVSS8.1AI score0.00934EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/01/08 5:52 p.m.43 views

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.8CVSS8.6AI score0.00934EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/01/08 5:52 p.m.37 views

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

8.2AI score0.00934EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/07 2:15 p.m.17 views

CVE-2020-26979

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what...

6.1CVSS5.4AI score0.00717EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2021/01/07 1:51 p.m.63 views

CVE-2020-26979

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what...

6.1CVSS6.9AI score0.00717EPSS
SaveExploits1
CNVD
CNVD
added 2021/01/07 12:00 a.m.9 views

SQL Injection Vulnerability in China Coal Pilot Navigation and Positioning Monitoring Platform

The business scope of China Coal Aerospace Remote Sensing Group Co., Ltd. includes: geographic remote sensing information services; satellite remote sensing application system integration; satellite remote sensing data processing; satellite technology integrated application system integration, et...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/01/07 12:00 a.m.8 views

China Coal Pilot Navigation and Positioning Monitoring Platform Has Overstepping Loopholes

The business scope of China Coal Aerospace Remote Sensing Group Co., Ltd. includes: geographic remote sensing information services; satellite remote sensing application system integration; satellite remote sensing data processing; satellite technology integrated application system integration, et...

7AI score
SaveExploits0
NVD
NVD
added 2021/01/05 3:15 p.m.18 views

CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.4CVSS5.2AI score0.00653EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/05 3:15 p.m.18 views

CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.4CVSS5.8AI score
SaveExploits0References2
Prion
Prion
added 2021/01/05 3:15 p.m.22 views

Cross site scripting

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

4.3CVSS5.1AI score0.00653EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/05 2:17 p.m.27 views

CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

5.2AI score0.00653EPSS
SaveExploits1References2
CVE
CVE
added 2021/01/05 2:17 p.m.53 views

CVE-2020-26046

CVE-2020-26046 affects FUEL CMS 1.4.11. A stored cross-site scripting vulnerability exists in the Blocks/Navigation/Site variables, exploitable by an authenticated user and potentially impacting other visitors. Reported impact includes cookie stealing and other malicious actions. The available do...

5.4CVSS5.1AI score0.00653EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder