Lucene search
+L

3183 matches found

attackerkb
attackerkb
•added 2021/09/27 9:15 p.m.•13 views

CVE-2021-37270

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

10CVSS7.2AI score0.01485EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/09/27 8:40 p.m.•44 views

CVE-2021-37270

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

9.5AI score0.01485EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/09/27 12:00 a.m.•11 views

PT-2021-21597

Name of the Vulnerable Software and Affected Versions CMS Enterprise Website Construction System version 5.0 Description The issue allows attackers to gain unauthorized access to the background administrator authority without logging in. This is achieved by directly accessing a specified backgrou...

10CVSS0.01485EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/27 12:00 a.m.•10 views

CVE-2021-37270: Missing Authorization

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

10CVSS5.9AI score0.01485EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2021/09/24 10:10 p.m.•42 views

Chromium: CVE-2021-37968 Inappropriate implementation in Background Fetch API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.3AI score0.01278EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2021/09/24 10:09 p.m.•32 views

Chromium: CVE-2021-37967 Inappropriate implementation in Background Fetch API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.3AI score0.00795EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2021/09/24 10:09 p.m.•42 views

Chromium: CVE-2021-37965 Inappropriate implementation in Background Fetch API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.3AI score0.0121EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2021/09/24 12:00 a.m.•54 views

KLA12299 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Tab...

9.6CVSS9.7AI score0.11735EPSS
SaveExploits3References19
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•89 views

Google Chrome Background Fetch API security bypass vulnerability (CNVD-2021-73419)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

4.3CVSS3.1AI score0.00795EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•95 views

Google Chrome Background Fetch API Security Bypass Vulnerability (CNVD-2021-73418)

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

4.3CVSS3.1AI score0.01278EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/09/22 12:00 a.m.•111 views

Google Chrome Background Fetch API security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

4.3CVSS3.1AI score0.0121EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/09/21 12:00 a.m.•25 views

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

4.3CVSS7AI score0.0121EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2021/09/21 12:00 a.m.•22 views

Google Chrome Security Feature Vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

4.3CVSS7AI score0.01278EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2021/09/21 12:00 a.m.•5 views

PT-2021-5639

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 94.0.4606.54 Description The issue is related to an inappropriate implementation in the Background Fetch API, which can allow a remote attacker to leak cross-origin data via a crafted HTML page. This can lead to...

4.3CVSS0.01278EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/09/21 12:00 a.m.•26 views

Google Chrome Access Control Vulnerability

Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in the Google Chrome Background Fetch API. An attacker could exploit this vulnerability to bypass security restrictions...

4.3CVSS7AI score0.00795EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2021/09/21 12:00 a.m.•6 views

PT-2021-5568

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 94.0.4606.54 Description The issue is related to an inappropriate implementation in the Background Fetch API, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could enable an...

4.3CVSS0.0121EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/09/21 12:00 a.m.•8 views

PT-2021-5638

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 94.0.4606.54 Description The issue is related to the Background Fetch API in Google Chrome, which can lead to information disclosure in the error domain. A remote attacker who has compromised the renderer proces...

4.3CVSS0.00795EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/14 12:00 a.m.•11 views

CVE-2020-21082: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

6.1CVSS5.6AI score0.00662EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/09/01 10:15 p.m.•19 views

CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

5.4CVSS5.7AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2021/09/01 10:15 p.m.•30 views

CVE-2020-20344

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the keyword search function under the background articles module...

5.4CVSS0.00503EPSS
SaveExploits1References1
Rows per page
Query Builder