Lucene search
+L

4161 matches found

OpenVAS
OpenVAS
•added 2018/06/27 12:00 a.m.•19 views

Microsoft Windows 10: InPrivate browsing (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeinprivatebrowsing.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow InPrivate browsing Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

7.3AI score
SaveExploits0
NVD
NVD
•added 2018/06/26 4:29 p.m.•37 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS7.2AI score0.01496EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2018/06/26 4:29 p.m.•25 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS6AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/06/26 4:29 p.m.•36 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS6.5AI score0.01496EPSS
SaveExploits1References4
Prion
Prion
•added 2018/06/26 4:29 p.m.•25 views

Cross site scripting

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

4.3CVSS5.9AI score0.01496EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2018/06/26 4:00 p.m.•76 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS6.2AI score0.01496EPSS
SaveExploits1
Mend
Mend
•added 2018/06/26 4:00 p.m.•5 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS0.01496EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2018/06/26 4:00 p.m.•49 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1AI score0.01496EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/06/26 12:00 a.m.•5 views

PT-2018-9454

Name of the Vulnerable Software and Affected Versions qutebrowser versions 0.11.0 through 1.3.2 Description The issue is related to a Cross Site Scripting XSS vulnerability in the history command and the qute://history page. This vulnerability can be exploited when a victim opens a page with a...

9.3CVSS0.01496EPSS
SaveExploits1References26
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/26 12:00 a.m.•6 views

CVE-2018-1000559: Improper Neutralization of Input During Web Page Generation

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS6.5AI score0.01496EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2018/06/11 9:29 p.m.•15 views

CVE-2018-5108

A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data to be passed between the private browsing tab and a normal tab. This could allow for the leaking of private information specific to the private browsing context. This issue is...

4.3CVSS7.3AI score0.01128EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2018/06/11 9:29 p.m.•12 views

CVE-2017-7843

When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not...

7.5CVSS6.8AI score
SaveExploits0References9
osv_debian
osv_debian
•added 2018/06/11 9:29 p.m.•8 views

DEBIAN-CVE-2017-7843

When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not...

7.5CVSS8.3AI score0.02892EPSS
SaveExploits1References1
NVD
NVD
•added 2018/06/11 9:29 p.m.•23 views

CVE-2017-7843

When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not...

7.5CVSS6.8AI score0.02892EPSS
SaveExploits1References9
NVD
NVD
•added 2018/06/11 9:29 p.m.•28 views

CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

9.1CVSS8.5AI score0.02395EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2018/06/11 9:29 p.m.•9 views

CVE-2017-5468

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox 53...

9.1CVSS5.8AI score0.02395EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2018/06/11 9:29 p.m.•7 views

CVE-2016-9062

Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Firefox profile after the mode is exited. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This...

3.3CVSS7.3AI score0.00392EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2018/06/11 9:29 p.m.•28 views

CVE-2016-9062

Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Firefox profile after the mode is exited. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This...

3.3CVSS6.8AI score0.00392EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2018/06/11 9:29 p.m.•17 views

UBUNTU-CVE-2017-7843

When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not...

7.5CVSS6.8AI score0.02892EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2018/06/11 9:29 p.m.•33 views

CVE-2017-7843

When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not...

7.5CVSS6.8AI score0.02892EPSS
SaveExploits1References1
Rows per page
Query Builder