Lucene search
+L

5366 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•6 views

CVE-2021-38022: Undefined Security Weakness

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.5AI score0.00856EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•3 views

CVE-2021-38009: Observable Discrepancy

Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.5AI score0.00831EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/23 10:15 p.m.•5 views

DEBIAN-CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.6AI score0.0087EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/23 10:15 p.m.•18 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS0.0087EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/11/23 10:15 p.m.•12 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.4AI score0.0087EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/11/23 10:15 p.m.•44 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.3AI score0.0087EPSS
SaveExploits0References3
Prion
Prion
•added 2021/11/23 10:15 p.m.•28 views

Design/Logic Flaw

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS4.8AI score0.0087EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2021/11/23 10:15 p.m.•16 views

UBUNTU-CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.0087EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/11/23 9:30 p.m.•60 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.4AI score0.0087EPSS
SaveExploits0References3
CVE
CVE
•added 2021/11/23 9:30 p.m.•145 views

CVE-2021-38004

CVE-2021-38004 affects Chromium-based Google Chrome Autofill: insufficient policy enforcement allows a remote attacker to leak cross-origin data via a crafted HTML page, prior to version 95.0.4638.69. Affected component: Autofill in Chromium/Chrome; root cause is policy enforcement gaps. Impact: ...

4.3CVSS4.9AI score0.0087EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2021/11/23 9:30 p.m.•64 views

CVE-2021-38004

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS3.8AI score0.0087EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•18 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 95.0.4638.69, which stems from insufficient Autofill policy enforcement. An attacker could exploit this vulnerability to leak cross-source data via specially crafted HTML pages...

4.3CVSS8.3AI score0.0087EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•4 views

CVE-2021-38004: Exposure of Resource to Wrong Sphere

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.6AI score0.0087EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/11/18 12:00 a.m.•53 views

Microsoft Edge (Chromium) < 93.0.961.38 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.38. It is, therefore, affected by multiple vulnerabilities as referenced in the September 2, 2021 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability This CVE ID is unique from...

8.8CVSS6.9AI score0.0559EPSS
SaveExploits1References49
Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•3 views

PT-2021-5294

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.93 Microsoft Edge affected versions not specified Description The issue is related to insufficient data validation in the loader, allowing a remote attacker to leak cross-origin data via a crafted HTML...

7.8CVSS0.01275EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•3 views

PT-2021-5703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to an inappropriate implementation in the WebAuthentication mechanism of Google Chrome, which can allow a remote attacker to leak cross-origin data. This can be...

6.5CVSS0.00856EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•2 views

PT-2021-5305

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to insufficient policy enforcement in CORS, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can enable the attacker to bypass...

6.5CVSS0.00831EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•2 views

PT-2021-5631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to an inappropriate implementation in the cache component of Google Chrome, which can be exploited by a remote attacker to leak cross-origin data. This can be achiev...

9.3CVSS0.00831EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/11/15 12:00 a.m.•18 views

Google Chrome 安全特征问题漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...

6.5CVSS8.2AI score0.00856EPSS
SaveExploits0References12
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•22 views

Mozilla Firefox Security Advisory (MFSA2011-50) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

2.6CVSS9.6AI score0.00958EPSS
SaveExploits0References3
Rows per page
Query Builder