Lucene search
+L

3503 matches found

NVD
NVD
added 2019/02/19 5:29 p.m.18 views

CVE-2019-5774

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

8.8CVSS8.6AI score0.01511EPSS
SaveExploits0References7
OSV
OSV
added 2019/02/19 5:29 p.m.5 views

UBUNTU-CVE-2019-5774

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

8.8CVSS6.2AI score0.01511EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/02/19 5:29 p.m.26 views

CVE-2019-5774

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

8.8CVSS7.2AI score0.01511EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/02/19 5:0 p.m.26 views

CVE-2019-5774

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

7.1AI score0.01511EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2019/02/19 5:0 p.m.29 views

CVE-2019-5774

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

8.8CVSS9.1AI score0.01511EPSS
SaveExploits0
CVE
CVE
added 2019/02/19 5:0 p.m.242 views

CVE-2019-5774

CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...

8.8CVSS6.9AI score0.01511EPSS
SaveExploits0References7Affected Software1
ThreatPost
ThreatPost
added 2019/02/13 3:15 p.m.55 views

Unpatched Apple macOS Hole Exposes Safari Browsing History

A design flaw in Apple’s macOS could allow a malicious application to steal victims’ Safari web browsing history. The security hole exists in every version of the Mac’s Mojave operating system, including macOS Mojave 10.14.3 Supplemental Update recently released on Feb. 7. That’s according to Mac...

SaveExploits0References6
The Hacker News
The Hacker News
added 2019/02/12 6:43 p.m.73 views

New Unpatched macOS Flaw Lets Apps Spy On Your Safari Browsing History

A new security vulnerability has been discovered in the latest version of Apple's macOS Mojave that could allow a malicious application to access data stored in restricted folders which are otherwise not accessible to every app. Discovered by application developer Jeff Johnson on February 8, the...

1.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/02/12 2:46 a.m.9 views

chromium-browser: Insufficient validation of untrusted input in SafeBrowsing

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

8.8CVSS7.7AI score0.01511EPSS
SaveExploits0References5
Malwarebytes
Malwarebytes
added 2019/02/11 5:5 p.m.79 views

A week in security (February 4 – 8)

Last week on Malwarebytes Labs, we took a closer look at the technical and reputational challenges for Facebook as it tries to integrate secure messaging across Messenger, WhatsApp, and Instagram. We explored Google’s latest attempts to change how the public sees—literally—web browser URLs, gave...

0.2AI score
SaveExploits0
Kitploit
Kitploit
added 2019/02/09 12:56 p.m.227 views

HTTrack Website Copier - Web Crawler And Offline Browser

HTTrack allows you to download a World Wide Web site from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer. HTTrack arranges the original site's relative link-structure. Simply open a page of the...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2019/02/06 2:15 p.m.80 views

Get a Lifetime Subscription to Unlimited VPN for just $59.99 (5 Devices)

For all of the undeniable conveniences the Internet has brought us, it's becoming an increasingly dangerous place to be. Both individual hackers and entire government agencies are now able to hack into your computer or smartphone from across the globe and steal everything from your browsing histo...

7.3AI score
SaveExploits0
Hacker One
Hacker One
added 2019/02/02 3:32 p.m.41 views

Node.js third-party modules: [glance] Access unlisted internal files/folders revealing sensitive information

I would like to report sensitive information disclosure in glance. Similar to 486933 in ways Module module name: glance version: 3.0.5 npm page: https://www.npmjs.com/package/glance Module Description a quick disposable http server for static files Module Stats weekly downloads 41 Vulnerability...

6.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2019/01/30 10:30 a.m.22 views

CVE-2019-5774

Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file...

8.8CVSS4.7AI score0.01511EPSS
SaveExploits0References4
Veracode
Veracode
added 2019/01/15 9:19 a.m.16 views

Information Disclosure

Mozilla Firefox is vulnerable to information disclosure. A privacy flaw was discovered in Firefox. In Private Browsing mode, a web worker could write persistent data to IndexedDB, which was not cleared when exiting and would persist across multiple sessions. A malicious website could exploit the...

7.5CVSS8.2AI score0.02951EPSS
SaveExploits1References11Affected Software1
CNVD
CNVD
added 2019/01/15 12:0 a.m.7 views

Apple Safari Safari Private Browsing Information Disclosure Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari Private Browsing is one of the privacy browsing components of... An information disclosure vulnerability exists in the handling of downloads in the Safari...

7.5CVSS5.7AI score0.00947EPSS
SaveExploits0References1
OSV
OSV
added 2019/01/11 6:29 p.m.6 views

CVE-2018-4186

In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation...

7.5CVSS5.8AI score0.00947EPSS
SaveExploits0References1
NVD
NVD
added 2019/01/11 6:29 p.m.18 views

CVE-2018-4186

In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation...

7.5CVSS7AI score0.00947EPSS
SaveExploits0References1
Prion
Prion
added 2019/01/11 6:29 p.m.19 views

Input validation

In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation...

5CVSS7AI score0.00947EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/01/11 6:0 p.m.25 views

CVE-2018-4186

In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation...

7.3AI score0.00947EPSS
SaveExploits0References1
Rows per page
Query Builder