Lucene search
K

53 matches found

RedhatCVE
RedhatCVE
added 2018/09/07 12:49 a.m.32 views

CVE-2018-16086

Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

5.8CVSS4.4AI score0.00083EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/07/26 12:0 a.m.43 views

openSUSE Security Update : Chromium (openSUSE-2018-759)

This update for Chromium to version 67.0.3396.99 fixes multiple issues. Security issues fixed bsc1095163 : - CVE-2018-6123: Use after free in Blink - CVE-2018-6124: Type confusion in Blink - CVE-2018-6125: Overly permissive policy in WebUSB - CVE-2018-6126: Heap buffer overflow in Skia -...

9.6CVSS8AI score0.26653EPSS
Exploits3References32
CNVD
CNVD
added 2018/06/05 12:0 a.m.3 views

Google Chrome Restriction Bypass Vulnerability (CNVD-2018-12604)

Google Chrome is a web browser developed by Google Google. debugger extension API is one of the debugger extension API. A security vulnerability exists in the debugger extension API in Google Chrome versions prior to 67.0.3396.62. A remote attacker can exploit this vulnerability with the help of ...

9.3CVSS8.7AI score0.01184EPSS
Exploits0References1
CNVD
CNVD
added 2018/06/05 12:0 a.m.2 views

Google Chrome Restriction Bypass Vulnerability (CNVD-2018-11508)

Google Chrome is a web browser developed by Google Google. debugger extension API is one of the debugger extension API. A security vulnerability exists in the debugger extension API in Google Chrome versions prior to 67.0.3396.62. A remote attacker can exploit this vulnerability with the help of ...

8.8CVSS8.8AI score0.0076EPSS
Exploits0References1
NVD
NVD
added 2017/01/19 5:59 a.m.16 views

CVE-2016-5217

The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS5.9AI score0.00211EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2017/01/19 5:59 a.m.32 views

CVE-2016-5201

A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page...

6.5CVSS7AI score0.0052EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/01/19 5:43 a.m.23 views

CVE-2016-5217

Removed by vendor...

6.5CVSS8.1AI score0.00211EPSS
Exploits0
myhack58
myhack58
added 2015/09/01 12:0 a.m.22 views

mitmproxy kit using the Raiders and customization-bug warning-the black bar safety net

mitmproxy is a support for HTTPSMiTM proxy tool. Different from Fiddler2, and burpsuite, etc. similar function tools, mitmproxy can be in the terminal under the run. mitmproxy in Python development, is to assist the web development&testing, debugging, penetration testing tool. The working princip...

Exploits0
Tenable Nessus
Tenable Nessus
added 2014/09/30 12:0 a.m.42 views

Debian DSA-3039-1 : chromium-browser - security update

Several vulnerabilities were discovered in the chromium web browser. - CVE-2014-3160 Christian Schneider discovered a same origin bypass issue in SVG file resource fetching. - CVE-2014-3162 The Google Chrome development team addressed multiple issues with potential security impact for chromium...

10CVSS9.1AI score0.23379EPSS
Exploits0References36
Tenable Nessus
Tenable Nessus
added 2014/08/27 12:0 a.m.33 views

Google Chrome < 37.0.2062.94 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 37.0.2062.94. It is, therefore, affected by the following vulnerabilities : - Blink contains a use-after-free vulnerability in its SVG implementation. By using a specially crafted web page, a remote attacker...

10CVSS8.6AI score0.23379EPSS
Exploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2013/04/12 3:41 a.m.2 views

Sleipnir Mobile for Android loads arbitrary Extension API

Overview Sleipnir Mobile for Android has an Extension mechanism to customize browser functions, and this Extension function makes calls to an Extension API. Sleipnir Mobile for Android contains an issue that may allow a specially crafted web page to load an arbitrary Extension API. Keita Haga of...

5.8CVSS6.6AI score0.00217EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2013/03/28 12:18 p.m.15 views

CVE-2013-0920

Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS6AI score0.00609EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2012/11/06 12:0 a.m.29 views

Apple iOS < 6.0.1 Multiple Vulnerabilities

Binary data 6615.prm...

10CVSS8.7AI score0.11812EPSS
Exploits3References6
Rows per page
Query Builder