Lucene search
+L

5365 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•5 views

CVE-2019-5837: Undefined Security Weakness

Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.7AI score0.01519EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•4 views

CVE-2019-5814: Cross-Site Request Forgery (CSRF)

Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.6AI score0.00912EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•8 views

CVE-2018-6150: Exposure of Sensitive Information to an Unauthorized Actor

Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.8AI score0.00854EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•4 views

CVE-2017-5028: Improper Input Validation

Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.6AI score0.00909EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•5 views

CVE-2018-16069: Out-of-bounds Read

Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.8AI score0.00889EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•5 views

CVE-2019-5830: Undefined Security Weakness

Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.7AI score0.01374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/27 12:00 a.m.•3 views

CVE-2019-5832: Undefined Security Weakness

Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.7AI score0.01247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/06/07 11:53 a.m.•30 views

CVE-2019-5837

Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS2.4AI score0.01519EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/06/04 12:00 a.m.•2 views

PT-2019-5111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 75.0.3770.80 Description The issue is related to a component in the Blink web browser, specifically Google Chrome, and involves information leakage during interaction. It allows a remote attacker to gain...

7.1CVSS0.01519EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/06/04 12:00 a.m.•2 views

PT-2019-5108

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 75.0.3770.80 Description The issue is related to insufficient policy enforcement in the XMLHttpRequest component of Google Chrome, allowing a remote attacker to leak cross-origin data. This can be achieved throu...

7.1CVSS0.01247EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2019/04/25 8:26 a.m.•20 views

CVE-2019-5814

Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS3.2AI score0.00912EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/04/23 12:00 a.m.•2 views

PT-2019-3428

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108 Description The issue is related to insufficient policy enforcement in Blink, a component of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can be...

6.5CVSS0.00912EPSS
SaveExploits0
NVD
NVD
•added 2019/02/19 5:29 p.m.•20 views

CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01632EPSS
SaveExploits0References6
OSV
OSV
•added 2019/02/19 5:29 p.m.•5 views

DEBIAN-CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.6AI score0.01632EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2019/02/19 5:29 p.m.•11 views

CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.4AI score0.01632EPSS
SaveExploits0References9
Prion
Prion
•added 2019/02/19 5:29 p.m.•22 views

Design/Logic Flaw

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.6AI score0.01632EPSS
SaveExploits0References6Affected Software6
UbuntuCve
UbuntuCve
•added 2019/02/19 5:29 p.m.•31 views

CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.01632EPSS
SaveExploits0References1
OSV
OSV
•added 2019/02/19 5:29 p.m.•13 views

UBUNTU-CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.01632EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/02/19 5:00 p.m.•37 views

CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.8AI score0.01632EPSS
SaveExploits0References6
CVE
CVE
•added 2019/02/19 5:00 p.m.•291 views

CVE-2019-5766

CVE-2019-5766 describes an incorrect origin taint handling in Canvas within Chromium/Google Chrome, which could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Canvas origin taint check and is listed against Chrome versions prior to 72.0...

6.5CVSS5.6AI score0.01632EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder