Lucene search
+L

5360 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/11 12:00 a.m.•1 views

CVE-2020-6393: Missing Authorization

Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01854EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/02/10 12:15 p.m.•37 views

CVE-2020-6400

Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS4.8AI score0.02004EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2020/02/10 12:14 p.m.•25 views

CVE-2020-6393

Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS3.2AI score0.01854EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/02/04 12:00 a.m.•1 views

PT-2020-2015

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to insufficient policy enforcement in the AppCache component of Google Chrome, which can be exploited by a remote attacker to leak cross-origin data. This can be...

7.1CVSS0.01989EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/12/31 12:00 a.m.•38 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0233)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was foun...

9.8CVSS7.3AI score0.02178EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2019/12/17 12:00 a.m.•5 views

PT-2019-6445

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to insufficient policy enforcement in the Blink component of Google Chrome, which can be exploited by a remote attacker to leak cross-origin data. This can be achiev...

7.8CVSS0.01854EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2019/12/16 9:09 a.m.•13 views

chromium-browser: Insufficient policy enforcement in cookies

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.4AI score0.01426EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/12/16 9:09 a.m.•10 views

chromium-browser: Insufficient policy enforcement in audio

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.4AI score0.01505EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2019/12/16 9:09 a.m.•16 views

chromium-browser: Insufficient policy enforcement in payments

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.01219EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2019/12/11 1:21 a.m.•31 views

CVE-2019-13745

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS3.2AI score0.01505EPSS
SaveExploits1References4
CNVD
CNVD
•added 2019/12/11 12:00 a.m.•18 views

Google Chrome Information Disclosure Vulnerability (CNVD-2019-46754)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to disclose cross-origin data through specially crafted HTML pages...

6.5CVSS8.1AI score0.01505EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/12/11 12:00 a.m.•21 views

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46429)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to obtain cross-origin data with the help of specially crafted HTML pages...

4.3CVSS8.5AI score0.01219EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/10 10:15 p.m.•5 views

DEBIAN-CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS6.5AI score0.01219EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/10 10:15 p.m.•14 views

CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS7.9AI score
SaveExploits0References10
NVD
NVD
•added 2019/12/10 10:15 p.m.•21 views

CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS5AI score0.01219EPSS
SaveExploits0References10
NVD
NVD
•added 2019/12/10 10:15 p.m.•17 views

CVE-2019-13745

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.4AI score0.01505EPSS
SaveExploits1References10
OSV
OSV
•added 2019/12/10 10:15 p.m.•9 views

DEBIAN-CVE-2019-13744

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.2AI score0.01426EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/10 10:15 p.m.•15 views

CVE-2019-13744

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.9AI score
SaveExploits0References10
Prion
Prion
•added 2019/12/10 10:15 p.m.•21 views

Design/Logic Flaw

Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01426EPSS
SaveExploits0References10Affected Software7
Prion
Prion
•added 2019/12/10 10:15 p.m.•20 views

Design/Logic Flaw

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01505EPSS
SaveExploits1References10Affected Software7
Rows per page
Query Builder