Lucene search
+L

3590 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2024-2630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromiu...

6.5CVSS6.7AI score0.00744EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.5 views

PT-2025-32249

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.66 Description An inappropriate implementation in Extensions in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page if a user was convinced to perform specific UI...

8.8CVSS6AI score0.00326EPSS
SaveExploits0References53
AstraLinux
AstraLinux
added 2024/11/23 3:4 a.m.9 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in data transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.5AI score0.00446EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/11/22 12:0 a.m.18 views

Debian dla-3961 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3961 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3961-1 [email protected]...

6.5CVSS6.6AI score0.00944EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
added 2024/11/14 10:17 a.m.5 views

webkitgtk: A malicious website may exfiltrate data cross-origin

A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information...

6.5CVSS5.8AI score0.00638EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.27 views

CentOS 6 : chromium-browser (RHSA-2020:3723)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3723 advisory. - Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a...

9.3CVSS7.3AI score0.02296EPSS
SaveExploits3References14
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.24 views

CentOS 6 : thunderbird (RHSA-2020:5238)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5238 advisory. - Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted...

9.3CVSS7.9AI score0.0255EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2024/08/23 12:0 a.m.109 views

Microsoft Edge (Chromium) < 128.0.2739.42 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 128.0.2739.42. It is, therefore, affected by multiple vulnerabilities as referenced in the August 22, 2024 advisory. - Microsoft Edge HTML-based Memory Corruption Vulnerability CVE-2024-38207 - Microsoft Edge...

9.6CVSS7.7AI score0.20547EPSS
SaveExploits4References47
SUSE CVE
SUSE CVE
added 2024/08/22 3:12 a.m.7 views

SUSE CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.4AI score0.00446EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 9:15 p.m.4 views

DEBIAN-CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00446EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/21 9:15 p.m.23 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00446EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/21 9:15 p.m.16 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.8AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2024/08/21 9:15 p.m.15 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.8AI score0.00446EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/21 8:20 p.m.36 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.00446EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/21 8:20 p.m.17 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00446EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/21 8:20 p.m.417 views

CVE-2024-7978

CVE-2024-7978 is a Chrome/Chromium vulnerability: Insufficient policy enforcement in Data Transfer allowed cross-origin data leakage via a crafted HTML page when a user engages specific UI gestures. Affected product: Google Chrome/Chromium-based browsers. Root cause: insufficient policy enforceme...

4.3CVSS6AI score0.00446EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2024/08/21 8:20 p.m.39 views

CVE-2024-7978

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00446EPSS
SaveExploits0
OSV
OSV
added 2024/07/16 11:15 p.m.8 views

DEBIAN-CVE-2020-36765

Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.4AI score0.00322EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/16 11:15 p.m.25 views

CVE-2020-36765

Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00322EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/16 11:15 p.m.16 views

CVE-2020-36765

Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder