Lucene search
+L

370 matches found

CVE
CVE
added 2019/06/27 4:13 p.m.237 views

CVE-2019-5823

CVE-2019-5823 corresponds to a forced navigation from a service worker vulnerability in Chromium/Google Chrome, allowing navigation restriction bypass via a crafted HTML page. Affected products include Chromium/Chrome before version 74.0.3729.108. The issue is described as an access restriction b...

5.8CVSS5.6AI score0.01089EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2019/06/27 4:13 p.m.29 views

CVE-2019-5823

Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

5.7AI score0.01089EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2019/06/27 4:13 p.m.34 views

CVE-2019-5823

Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

5.8CVSS5.9AI score0.01089EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2019/04/25 8:22 a.m.24 views

CVE-2019-5823

Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

5.8CVSS5.3AI score0.01089EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/01/14 12:00 a.m.15 views

Google Chrome Information Disclosure Vulnerability (CNVD-2019-03595)

Google Chrome is a web browser developed by Google Google.Service Workers is a component that provides offline support for web applications. A security vulnerability exists in Service Workers in Google Chrome versions prior to 66.0.3359.117. A remote attacker can exploit the vulnerability to...

6.5CVSS8.7AI score0.02242EPSS
SaveExploits0References1
NVD
NVD
added 2019/01/09 7:29 p.m.26 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.02242EPSS
SaveExploits0References6
OSV
OSV
added 2019/01/09 7:29 p.m.7 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.8AI score0.02242EPSS
SaveExploits0References6
OSV
OSV
added 2019/01/09 7:29 p.m.11 views

UBUNTU-CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.02242EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2019/01/09 7:29 p.m.36 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.9AI score0.02242EPSS
SaveExploits0References2
Prion
Prion
added 2019/01/09 7:29 p.m.27 views

Design/Logic Flaw

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.3AI score0.02242EPSS
SaveExploits0References6Affected Software5
Cvelist
Cvelist
added 2019/01/09 7:00 p.m.44 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.4AI score0.02242EPSS
SaveExploits0References6
CVE
CVE
added 2019/01/09 7:00 p.m.149 views

CVE-2018-6091

CVE-2018-6091 corresponds to a Chrome/Chromium vulnerability where Service Workers incorrectly handle plugins. The connected documentation links this CVE to the Chrome/Chromium 66.0.3359.117 line, with advisories noting affected releases and urging upgrades. Affected product: Google Chrome (Chrom...

6.5CVSS6.3AI score0.02242EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2019/01/09 7:00 p.m.61 views

CVE-2018-6091

Removed by vendor...

6.5CVSS8AI score0.02242EPSS
SaveExploits0
Jake Archibald's Blog
Jake Archibald's Blog
added 2019/01/07 2:19 p.m.16 views

A declarative router for service workers

I'm looking for feedback on this API. It isn't yet supported in any standard or browser. In the very early days of service workers while they were still named "navigation controllers" we had the idea of a declarative router. This provided a high-level API to define the behaviour of particular...

SaveExploits0
Jake Archibald's Blog
Jake Archibald's Blog
added 2019/01/07 2:19 p.m.97 views

A declarative router for service workers

I'm looking for feedback on this API. It isn't yet supported in any standard or browser. In the very early days of service workers while they were still named "navigation controllers" we had the idea of a declarative router. This provided a high-level API to define the behaviour of particular...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:00 a.m.22 views

Fedora 28 : mozilla-noscript (2018-e9821afbca)

Changes since 10.1.8.16: === v 10.1.9.6 ============================================================= - TB Gracefully handle legacy external message recipients - XSS Updated known HTML5 events - Better IPV6 support - UI support for protocol-only entries v 10.1.9.5...

9.8CVSS8.5AI score0.02741EPSS
SaveExploits0References2
Prion
Prion
added 2018/10/18 1:29 p.m.30 views

Cross site scripting

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

4.3CVSS5.5AI score0.01231EPSS
SaveExploits0References5Affected Software2
NVD
NVD
added 2018/10/18 1:29 p.m.19 views

CVE-2018-12358

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

4.3CVSS4.1AI score0.01231EPSS
SaveExploits0References5
OSV
OSV
added 2018/10/18 1:29 p.m.7 views

CVE-2018-12358

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

4.3CVSS6.5AI score0.01231EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2018/10/18 1:00 p.m.24 views

CVE-2018-12358

Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox 61...

5.3AI score0.01231EPSS
SaveExploits0References5
Rows per page
Query Builder