Lucene search
+L

3585 matches found

Debian CVE
Debian CVE
added 2021/01/08 5:48 p.m.40 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.9AI score0.0255EPSS
SaveExploits1
CVE
CVE
added 2021/01/08 5:48 p.m.1353 views

CVE-2020-16012

CVE-2020-16012 is a timing side-channel vulnerability involving cross-origin data leakage via drawImage in graphics code. Connected advisories confirm multiple Mozilla products are affected (notably Firefox/Thunderbird) and that the issue arises from variable-time processing of cross-origin image...

4.3CVSS5.5AI score0.0255EPSS
SaveExploits1References2Affected Software2
AlpineLinux
AlpineLinux
added 2021/01/08 5:48 p.m.31 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.9AI score0.0255EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/01/01 12:0 a.m.13 views

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

9.6CVSS6.6AI score0.99595EPSS
SaveExploits52References342
Veracode
Veracode
added 2020/12/21 7:58 p.m.21 views

Information Disclosure

chromium is vulnerable to information disclosure. Inappropriate implementation in Content Security Policy allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS2.3AI score0.01523EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2020/12/21 7:57 p.m.20 views

Information Disclosure

chromium is vulnerable to information disclosure. Insufficient policy enforcement in autofill allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS3.2AI score0.01646EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2020/12/21 7:52 p.m.21 views

Information Leak

chromium, sid is vulnerable to information leak in content security policy in Google Chrome. It allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS2.2AI score0.01685EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2020/12/21 7:52 p.m.32 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists through policy bypass in CORS that allows a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS3.9AI score0.04765EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2020/12/21 7:50 p.m.28 views

Information Disclosure

chromium is vulnerable to information disclosure. Inappropriate implementation in WebView allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS2.4AI score0.01015EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
added 2020/12/06 3:5 a.m.19 views

Information Disclosure

Google Chrome is vulnerable to information disclosure. An attacker is able to leak cross-origin data via a crafted HTML page...

6.5CVSS1.1AI score0.01632EPSS
SaveExploits0References9Affected Software1
RedHat Linux
RedHat Linux
added 2020/12/01 3:26 p.m.7 views

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.0255EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/11/30 7:50 p.m.7 views

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.0255EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/11/30 8:37 a.m.7 views

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.0255EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2020/11/17 12:0 a.m.26 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.8AI score0.0255EPSS
SaveExploits1References6
OSV
OSV
added 2020/09/21 8:15 p.m.1 views

DEBIAN-CVE-2020-6561

Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01523EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/21 8:15 p.m.11 views

CVE-2020-6561

Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.01523EPSS
SaveExploits0References8
NVD
NVD
added 2020/09/21 8:15 p.m.10 views

CVE-2020-6560

Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.01646EPSS
SaveExploits0References7
OSV
OSV
added 2020/09/21 8:15 p.m.7 views

CVE-2020-6562

Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS8.1AI score
SaveExploits0References8
OSV
OSV
added 2020/09/21 8:15 p.m.6 views

CVE-2020-6560

Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS8.1AI score
SaveExploits0References7
OSV
OSV
added 2020/09/21 8:15 p.m.1 views

DEBIAN-CVE-2020-6562

Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01495EPSS
SaveExploits0References1
Rows per page
Query Builder