3 matches found
EUVD-2016-3918
Malware in sbrugna...
5.3CVSS7.3AI score0.02223EPSS
SaveExploits0References12
CVE-2016-2845
The Content Security Policy CSP implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation report...
5.3CVSS7.3AI score0.02223EPSS
SaveExploits0References8
Path traversal
The Content Security Policy CSP implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation report...
5CVSS6.1AI score0.02223EPSS
SaveExploits0References8Affected Software1
20