Lucene search
+L

5257 matches found

NVD
NVD
•added 2019/01/09 7:29 p.m.•28 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.02139EPSS
SaveExploits0References6
Mend
Mend
•added 2019/01/09 7:00 p.m.•4 views

CVE-2018-6093

Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

7.1CVSS0.01597EPSS
SaveExploits0References9
Mend
Mend
•added 2019/01/09 7:00 p.m.•2 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

7.1CVSS0.02139EPSS
SaveExploits0References8
CVE
CVE
•added 2019/01/09 7:00 p.m.•157 views

CVE-2018-6091

CVE-2018-6091 corresponds to a Chrome/Chromium vulnerability where Service Workers incorrectly handle plugins. The connected documentation links this CVE to the Chrome/Chromium 66.0.3359.117 line, with advisories noting affected releases and urging upgrades. Affected product: Google Chrome (Chrom...

6.5CVSS6.3AI score0.02139EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2019/01/09 7:00 p.m.•65 views

CVE-2018-6091

Removed by vendor...

6.5CVSS8AI score0.02139EPSS
SaveExploits0
OSV
OSV
•added 2019/01/09 4:29 p.m.•8 views

ALPINE-CVE-2018-20679

An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components consumed by the DHCP server, client, and relay allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcpgetoption in...

7.5CVSS6.6AI score0.07694EPSS
SaveExploits2References1
OSV
OSV
•added 2019/01/09 4:29 p.m.•7 views

ALPINE-CVE-2019-5747

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components consumed by the DHCP client, server, and/or relay might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte...

7.5CVSS6.7AI score0.04651EPSS
SaveExploits2References1
OSV
OSV
•added 2019/01/09 12:00 a.m.•12 views

UBUNTU-CVE-2019-5747

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components consumed by the DHCP client, server, and/or relay might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte...

7.5CVSS7.1AI score0.04651EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/09 12:00 a.m.•6 views

CVE-2018-6137: Exposure of Sensitive Information to an Unauthorized Actor

CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.7AI score0.01902EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/09 12:00 a.m.•4 views

CVE-2018-6091: Undefined Security Weakness

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.6AI score0.02139EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/09 12:00 a.m.•5 views

CVE-2018-6093: Exposure of Sensitive Information to an Unauthorized Actor

Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.6AI score0.01597EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2019/01/08 5:05 p.m.•10 views

20-Year-Old Man Arrested For Carrying Out Germany's Biggest Data Leak

German federal police have arrested a 20-year-old local student for stealing and publishing a massive trove of personal data of hundreds of politicians, journalists and other public figures last month. The young man, whose identity has not been revealed by the police, was arrested after police...

6.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/01/08 5:05 p.m.•118 views

20-Year-Old Man Arrested For Carrying Out Germany's Biggest Data Leak

German federal police have arrested a 20-year-old local student for stealing and publishing a massive trove of personal data of hundreds of politicians, journalists and other public figures last month. The young man, whose identity has not been revealed by the police, was arrested after police...

0.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/01/08 12:00 a.m.•3 views

PT-2019-9946

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale GPFS versions 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 Description The issue may cause read operations on a file to return data from a different file when Local Read Only Cache LROC is enabled. Recommendations For IBM...

4CVSS0.00391EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2019/01/04 1:52 p.m.•4 views

Hackers Leak Personal Data from Hundreds of German Politicians On Twitter

Germany has been hit with the biggest hack in its history. A group of unknown hackers has leaked highly-sensitive personal data from more than 100 German politicians, including German Chancellor Angela Merkel, Brandenburg's prime minister Dietmar Woidke, along with some German artists, journalist...

6.2AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/01/04 1:52 p.m.•245 views

Hackers Leak Personal Data from Hundreds of German Politicians On Twitter

Germany has been hit with the biggest hack in its history. A group of unknown hackers has leaked highly-sensitive personal data from more than 100 German politicians, including German Chancellor Angela Merkel, Brandenburg's prime minister Dietmar Woidke, along with some German artists, journalist...

0.7AI score
SaveExploits0
OSV
OSV
•added 2019/01/03 3:29 p.m.•44 views

PYSEC-2019-141

ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with nolog on that can lead to leakage of sensible data...

5.3CVSS2.9AI score0.02483EPSS
SaveExploits0References15
Prion
Prion
•added 2019/01/03 2:29 p.m.•33 views

Default configuration

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...

7.5CVSS9AI score0.0111EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2019/01/03 2:29 p.m.•34 views

CVE-2018-16879

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...

9.8CVSS7.6AI score0.0111EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/01/03 2:00 p.m.•37 views

CVE-2018-16879

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...

7.3CVSS9.2AI score0.0111EPSS
SaveExploits0References2
Rows per page
Query Builder