Lucene search
+L

1152 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/10/21 12:00 a.m.•8 views

CVE-2010-4033: Undefined Security Weakness

Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors...

5CVSS5.9AI score0.01211EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2010/10/20 12:00 a.m.•65 views

Google Chrome < 7.0.517.41 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41. Such versions are reportedly affected by multiple vulnerabilities : - It is possible to spam profiles via autofill / autocomplete. Issue 48225, 51727 - An unspecified crash exists relating to forms. Issue 48857 ...

9.8CVSS7.2AI score0.02133EPSS
SaveExploits3References9
NVD
NVD
•added 2010/10/13 7:00 p.m.•38 views

CVE-2010-0808

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."...

2.6CVSS5.8AI score0.09525EPSS
SaveExploits1References3
Prion
Prion
•added 2010/10/13 7:00 p.m.•32 views

Information disclosure

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."...

2.6CVSS6.2AI score0.09525EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2010/10/13 6:00 p.m.•92 views

CVE-2010-0808

CVE-2010-0808 represents an information disclosure vulnerability in Microsoft Internet Explorer 6 and 7 (on Windows XP and Windows Vista) where scripted AutoComplete actions could be used to capture previously entered form data via a malicious page. The issue arises from IE’s AutoComplete feature...

2.6CVSS7.8AI score0.09525EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2010/10/13 6:00 p.m.•39 views

CVE-2010-0808

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."...

8AI score0.09525EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2010/10/13 12:00 a.m.•14 views

PT-2010-2537 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 7 Description: The issue allows remote attackers to obtain sensitive form information via a crafted web site by simulating user interaction with the AutoComplete feature. An attacker could exploi...

2.6CVSS5.8AI score0.09525EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/10/13 12:00 a.m.•7 views

CVE-2010-0808: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."...

2.6CVSS5.8AI score0.09525EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2010/10/13 12:00 a.m.•55 views

Microsoft Internet Explorer Multiple Vulnerabilities (2360131)

This host is missing a critical security update according to Microsoft Bulletin MS10-071. OpenVAS Vulnerability Test $Id: secpodms10-071.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2360131 Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...

9.3CVSS0.3AI score0.31932EPSS
SaveExploits14References3
NVD
NVD
•added 2010/09/07 6:00 p.m.•28 views

CVE-2010-3256

Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...

4.3CVSS6AI score0.00621EPSS
SaveExploits0References3
Prion
Prion
•added 2010/09/07 6:00 p.m.•25 views

Design/Logic Flaw

Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...

4.3CVSS6.6AI score0.00621EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2010/09/07 6:00 p.m.•34 views

CVE-2010-3256

Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...

4.3CVSS5.9AI score0.00621EPSS
SaveExploits0References1
CVE
CVE
•added 2010/09/07 5:00 p.m.•73 views

CVE-2010-3256

CVE-2010-3256 corresponds to a Google Chrome issue described as: Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries. The provided sources confirm this vulnerability entry and cite Chrome

4.3CVSS6AI score0.00621EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2010/09/07 5:00 p.m.•4 views

CVE-2010-3256

Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...

6.3CVSS0.00621EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2010/09/07 5:00 p.m.•40 views

CVE-2010-3256

Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...

5.9AI score0.00621EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2010/09/07 5:00 p.m.•47 views

CVE-2010-3256

Removed by vendor...

4.3CVSS6.7AI score0.00621EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/09/07 12:00 a.m.•5 views

CVE-2010-3256: Undefined Security Weakness

Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors...

4.3CVSS5.7AI score0.00621EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2010/09/02 12:00 a.m.•16 views

Google Chrome < 6.0.472.53 Multiple Vulnerabilities

Binary data 800892.prm...

7.3AI score
SaveExploits0References1
NVD
NVD
•added 2010/06/21 7:30 p.m.•36 views

CVE-2010-2353

The Node Reference module in Content Construction Kit CCK module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes...

5CVSS6.6AI score0.01766EPSS
SaveExploits0References9
Prion
Prion
•added 2010/06/21 7:30 p.m.•23 views

Design/Logic Flaw

The Node Reference module in Content Construction Kit CCK module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes...

5CVSS7.2AI score0.01766EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder