Lucene search
+L

182 matches found

Cvelist
Cvelist
added 2021/02/26 1:55 a.m.37 views

CVE-2021-23971

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects...

6.8AI score0.01007EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2021/02/26 1:55 a.m.37 views

CVE-2021-23971

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects...

6.5CVSS8.1AI score0.01007EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/02/26 1:55 a.m.51 views

CVE-2021-23971

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects...

6.5CVSS6.7AI score0.01007EPSS
SaveExploits0
Veracode
Veracode
added 2021/02/25 12:07 a.m.27 views

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to an error when processing a redirect with a conflicting Referrer-Policy. The browser adopts redirect's Referrer-Policy, which may result in disclosure of more information than intended by the original origin...

6.5CVSS1.8AI score0.01007EPSS
SaveExploits0References4Affected Software7
Tenable Nessus
Tenable Nessus
added 2021/02/23 12:00 a.m.69 views

Mozilla Firefox < 86.0

The version of Firefox installed on the remote Windows host is prior to 86.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-07 advisory. - Mozilla developers Tyson Smith, Lars T Hansen, Valentin Gosu, and Sebastian Hengst reported memory safety bugs present ...

8.8CVSS7.9AI score0.0153EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
added 2021/02/23 12:00 a.m.87 views

Mozilla Firefox < 86.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 86.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-07 advisory. - Mozilla developers Tyson Smith, Lars T Hansen, Valentin Gosu, and Sebastian Hengst reported memory safety bug...

8.8CVSS7.9AI score0.0153EPSS
SaveExploits1References13
BDU FSTEC
BDU FSTEC
added 2021/01/21 12:00 a.m.13 views

The vulnerability in the implementation of the Referrer Policy policy of the Mozilla Firefox browser allows a violator to gain unauthorized access to protected information.

The vulnerability of the Referrer Policy implementation in Mozilla Firefox’s browser is related to an incorrect request for the element, which can be triggered multiple times. Exploiting this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

5.3CVSS6.9AI score0.01545EPSS
SaveExploits0References7Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/11/06 12:00 a.m.40 views

Mozilla Firefox ESR < 31.7 Multiple Vulnerabilities

Binary data 701255.prm...

9.3CVSS9.3AI score0.07425EPSS
SaveExploits0References26
NVD
NVD
added 2019/06/27 5:15 p.m.21 views

CVE-2018-6134

Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page...

6.5CVSS5.9AI score0.0086EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/27 5:15 p.m.5 views

CVE-2018-6134

Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page...

6.5CVSS5.8AI score0.0086EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/27 5:15 p.m.8 views

UBUNTU-CVE-2018-6134

Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page...

6.5CVSS7AI score0.0086EPSS
SaveExploits0References3
Prion
Prion
added 2019/06/27 5:15 p.m.19 views

Design/Logic Flaw

Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page...

4.3CVSS6.6AI score0.0086EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/06/27 5:15 p.m.27 views

CVE-2018-6134

Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page...

6.5CVSS6.9AI score0.0086EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/06/27 4:13 p.m.33 views

CVE-2018-6134

Removed by vendor...

6.5CVSS8AI score0.0086EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/04/02 12:00 a.m.17 views

Missing Referrer Policy

Referrer Policy provides mechanisms to websites to restrict referrer information sent in the referer header that browsers will be allowed to add. No Referrer Policy header or metatag configuration has been detected. No source data...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:00 a.m.46 views

openSUSE Security Update : Chromium (openSUSE-2019-548)

This update for Chromium to version 67.0.3396.99 fixes multiple issues. Security issues fixed bsc1095163 : - CVE-2018-6123: Use after free in Blink - CVE-2018-6124: Type confusion in Blink - CVE-2018-6125: Overly permissive policy in WebUSB - CVE-2018-6126: Heap buffer overflow in Skia -...

9.6CVSS8AI score0.07666EPSS
SaveExploits6References32
UbuntuCve
UbuntuCve
added 2019/03/26 6:29 p.m.57 views

CVE-2019-3850

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly in the same window. Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more...

6.1CVSS6.1AI score0.0082EPSS
SaveExploits0References4
Prion
Prion
added 2019/03/26 6:29 p.m.23 views

Design/Logic Flaw

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly in the same window. Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more...

5.8CVSS6.1AI score0.0082EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/09/25 2:29 p.m.5 views

UBUNTU-CVE-2018-6052

Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data...

4.3CVSS6.7AI score0.01349EPSS
SaveExploits0References3
Prion
Prion
added 2018/09/25 2:29 p.m.18 views

Code injection

Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data...

4.3CVSS5.2AI score0.01349EPSS
SaveExploits0References6Affected Software5
Rows per page
Query Builder