5199 matches found
CVE-2018-6138
Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
CVE-2018-6148
CVE-2018-6148 affects Google Chrome/chromium prior to version 67.0.3396.79, where incorrect handling of the Content Security Policy (CSP) header allowed a remote attacker to bypass navigation restrictions with a crafted HTML page. The vulnerability is due to CSP header handling and is mitigated b...
CVE-2018-6138
Removed by vendor...
CVE-2018-16064
Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
CVE-2018-16064
Removed by vendor...
CVE-2018-16086
Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
CVE-2018-16086
Summary: CVE-2018-16086 affects Google Chrome/Chromium prior to 69.0.3497.81. The issue is caused by insufficient policy enforcement in the extensions API, enabling a user-driven attacker to bypass navigation restrictions via a crafted Chrome Extension. Impact (as stated): bypass of navigation re...
CVE-2018-16086
Removed by vendor...
SQL Injection Vulnerability in the Backend of Kewe Polymerization Navigation System v1.7
Kewe Polymerization Navigation System is a full-featured web site navigation system made with PHP+MYSQL. A SQL injection vulnerability exists in the backend of Kovi Convergent Navigation v1.7. A remote attacker can exploit this vulnerability to obtain sensitive database information...
chromium-browser: Popup blocker bypass
Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
[SECURITY] Fedora 30 Update: evince-3.32.0-3.fc30
Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...
Update for Windows Server 2012: April 25, 2019
Update for Windows Server 2012: April 25, 2019 Summary This update includes the quality improvements from KB4493450, in addition to new Japanese Era related changes. Key changes include: Updates the NLS registry to support the new Japanese Era. Addresses an issue that causes the Date and Time...
CVE-2019-5840
Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
[SECURITY] Fedora 30 Update: drupal7-path_breadcrumbs-3.4-1.fc30
Path breadcrumbs module helps you to create breadcrumbs for any page with a ny selection rules and load any entity from the URL. Features Breadcrumbs navigation may be added to any kind of page: static example: node/1 or dynamic example: node/NID. You can load contexts from URL and use it like...
Fedora 29 : webkit2gtk3 (2019-a0d15f5e40)
Fix rendering of emojis copy-pasted from GTK emoji chooser. - Fix space characters not being rendered with some CJK fonts. - Fix adaptive streaming playback with older GStreamer versions. - Set a maximum zoom level for pinch zooming gesture. - Fix navigation gesture to not interfere with...
DEBIAN-CVE-2019-5802
Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
CVE-2019-5802
Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
Hardcoded credentials
Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...