Lucene search
+L

5367 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•6 views

CVE-2021-38022: Undefined Security Weakness

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.5AI score0.00856EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•6 views

CVE-2021-4059: Improper Input Validation

Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.7AI score0.01275EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•4 views

CVE-2021-38009: Observable Discrepancy

Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.5AI score0.00831EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/23 10:15 p.m.•5 views

DEBIAN-CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.6AI score0.0087EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/23 10:15 p.m.•12 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.4AI score0.0087EPSS
SaveExploits0References4
NVD
NVD
•added 2021/11/23 10:15 p.m.•19 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS0.0087EPSS
SaveExploits0References3
OSV
OSV
•added 2021/11/23 10:15 p.m.•16 views

UBUNTU-CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.0087EPSS
SaveExploits0References4
Prion
Prion
•added 2021/11/23 10:15 p.m.•29 views

Design/Logic Flaw

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS4.8AI score0.0087EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2021/11/23 10:15 p.m.•44 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.3AI score0.0087EPSS
SaveExploits0References3
CVE
CVE
•added 2021/11/23 9:30 p.m.•146 views

CVE-2021-38004

CVE-2021-38004 affects Chromium-based Google Chrome Autofill: insufficient policy enforcement allows a remote attacker to leak cross-origin data via a crafted HTML page, prior to version 95.0.4638.69. Affected component: Autofill in Chromium/Chrome; root cause is policy enforcement gaps. Impact: ...

4.3CVSS4.9AI score0.0087EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/11/23 9:30 p.m.•60 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.4AI score0.0087EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2021/11/23 9:30 p.m.•65 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS3.8AI score0.0087EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•5 views

CVE-2021-38004: Exposure of Resource to Wrong Sphere

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.6AI score0.0087EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•18 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 95.0.4638.69, which stems from insufficient Autofill policy enforcement. An attacker could exploit this vulnerability to leak cross-source data via specially crafted HTML pages...

4.3CVSS8.3AI score0.0087EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/11/18 12:00 a.m.•53 views

Microsoft Edge (Chromium) < 93.0.961.38 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.38. It is, therefore, affected by multiple vulnerabilities as referenced in the September 2, 2021 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability This CVE ID is unique from...

8.8CVSS6.9AI score0.0559EPSS
SaveExploits1References49
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•4 views

PT-2021-5294

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.93 Microsoft Edge affected versions not specified Description The issue is related to insufficient data validation in the loader, allowing a remote attacker to leak cross-origin data via a crafted HTML...

7.8CVSS0.01275EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•3 views

PT-2021-5703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to an inappropriate implementation in the WebAuthentication mechanism of Google Chrome, which can allow a remote attacker to leak cross-origin data. This can be...

6.5CVSS0.00856EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•3 views

PT-2021-5305

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to insufficient policy enforcement in CORS, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can enable the attacker to bypass...

6.5CVSS0.00831EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/11/15 12:00 a.m.•18 views

Google Chrome 安全特征问题漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...

6.5CVSS8.2AI score0.00856EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•3 views

PT-2021-5631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to an inappropriate implementation in the cache component of Google Chrome, which can be exploited by a remote attacker to leak cross-origin data. This can be achiev...

9.3CVSS0.00831EPSS
SaveExploits0
Rows per page
Query Builder