Lucene search
+L

824 matches found

RedhatCVE
RedhatCVE
•added 2020/02/10 12:15 p.m.•23 views

CVE-2020-6414

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

8.8CVSS3.2AI score0.01857EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/02/10 12:00 a.m.•45 views

openSUSE Security Update : chromium (openSUSE-2020-189)

This update for chromium fixes the following issues : Chromium was updated to version 80.0.3987.87 boo1162833. Security issues fixed : - CVE-2020-6381: Integer overflow in JavaScript boo1162833. - CVE-2020-6382: Type Confusion in JavaScript boo1162833. - CVE-2019-18197: Multiple vulnerabilities i...

8.8CVSS6.9AI score0.06997EPSS
SaveExploits19References39
OPENSUSE Linux
OPENSUSE Linux
•added 2020/02/09 12:00 a.m.•130 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0189-1 Rating: important References: 1162833 Cross-References: CVE-2019-18197 CVE-2019-19880 CVE-2019-19923 CVE-2019-19925 CVE-2019-19926 CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387 CVE-2020-6388...

8.8CVSS6.9AI score0.06997EPSS
SaveExploits19References1
Positive Technologies
Positive Technologies
•added 2020/02/04 12:00 a.m.•2 views

PT-2020-6282

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to insufficient policy enforcement in the Safe Browsing feature, allowing a remote attacker to bypass navigation restrictions. This can be achieved via a crafted HTM...

10CVSS0.01857EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2020/02/04 12:00 a.m.•402 views

KLA11660 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

8.8CVSS7.7AI score0.06997EPSS
SaveExploits17References3
NVD
NVD
•added 2019/10/31 9:15 p.m.•43 views

CVE-2018-4031

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...

10CVSS9.2AI score0.02669EPSS
SaveExploits1References1
Prion
Prion
•added 2019/10/31 9:15 p.m.•33 views

Cross site request forgery (csrf)

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...

10CVSS9.3AI score0.02669EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/10/31 8:29 p.m.•56 views

CVE-2018-4031

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...

9CVSS9.5AI score0.02669EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/10/31 12:00 a.m.•6 views

PT-2019-10764

Name of the Vulnerable Software and Affected Versions CUJO Smart Firewall version 7003 Description The issue exists in the safe browsing function, where the parsing of HTTP requests is flawed. Specifically, the server hostname extracted from captured HTTP/HTTPS requests is inserted into a Lua...

10CVSS0.02669EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/31 12:00 a.m.•4 views

CVE-2018-4031: Improper Control of Generation of Code

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...

10CVSS8.2AI score0.02669EPSS
SaveExploits1References2
The Hacker News
The Hacker News
•added 2019/10/14 10:24 a.m.•72 views

Apple Under Fire Over Sending Some Users Browsing Data to China's Tencent

Do you know Apple is sending iOS web browsing related data of some of its users to Chinese Internet company Tencent? I am sure many of you are not aware of this, neither was I, and believe me, none of us could expect this from a tech company that promotes itself as a champion of consumer privacy...

0.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/10/14 10:24 a.m.•14 views

Apple Under Fire Over Sending Some Users Browsing Data to China's Tencent

Do you know Apple is sending iOS web browsing related data of some of its users to Chinese Internet company Tencent? I am sure many of you are not aware of this, neither was I, and believe me, none of us could expect this from a tech company that promotes itself as a champion of consumer privacy...

5.8AI score
SaveExploits0
OSV
OSV
•added 2019/07/12 5:01 p.m.•15 views

USN-4054-1 firefox vulnerabilities

A sandbox escape was discovered in Firefox. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. CVE-2019-9811 Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted...

9.8CVSS6.9AI score0.20271EPSS
SaveExploits4References22
OSV
OSV
•added 2019/03/21 4:29 p.m.•21 views

CVE-2018-4030

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any...

7.5CVSS5.8AI score0.01168EPSS
SaveExploits1References1
NVD
NVD
•added 2019/03/21 4:29 p.m.•34 views

CVE-2018-4030

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any...

7.5CVSS6AI score0.01168EPSS
SaveExploits1References1
Prion
Prion
•added 2019/03/21 4:29 p.m.•31 views

Cross site request forgery (csrf)

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any...

5CVSS7.5AI score0.01168EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/03/21 3:46 p.m.•33 views

CVE-2018-4030

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any...

5.3CVSS7.5AI score0.01168EPSS
SaveExploits1References1
CVE
CVE
•added 2019/03/21 3:46 p.m.•75 views

CVE-2018-4030

CVE-2018-4030 describes a vulnerability in the CUJO Smart Firewall (firmware 7003) where the safe-browsing HTTP/HTTPS host header is parsed incorrectly. The host value extracted from captured requests can be manipulated, enabling an attacker to bypass the firewall’s web-reputation checks and reac...

7.5CVSS6.3AI score0.01168EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/03/21 12:00 a.m.•4 views

PT-2019-10763

Name of the Vulnerable Software and Affected Versions CUJO Smart Firewall version 7003 Description A vulnerability exists in the safe browsing function, specifically in how it parses HTTP requests. The issue lies in the incorrect extraction of the Host header from captured HTTP requests, allowing...

7.5CVSS5.7AI score0.01168EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/21 12:00 a.m.•8 views

CVE-2018-4030: Inconsistent Interpretation of HTTP Requests

An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any...

7.5CVSS5.9AI score0.01168EPSS
SaveExploits1References2
Rows per page
Query Builder