Lucene search
K

281 matches found

OSV
OSV
added 2022/07/23 12:15 a.m.1 views

DEBIAN-CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.9AI score0.00227EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/07/23 12:15 a.m.24 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00227EPSS
Exploits1References1
OSV
OSV
added 2022/07/23 12:15 a.m.0 views

UBUNTU-CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.00227EPSS
Exploits1References2
CVE
CVE
added 2022/07/22 11:38 p.m.210 views

CVE-2022-1139

CVE-2022-1139 refers to an inappropriate implementation in Chrome’s Background Fetch API that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is associated with Chrome/Chromium before version 100.0.4896.60 and was acknowledged in Google’s March 29, 2022 ...

6.5CVSS6.2AI score0.00227EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/07/22 11:38 p.m.10 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.6AI score0.00227EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2022/07/22 11:38 p.m.35 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.00227EPSS
Exploits1
wpexploit
wpexploit
added 2022/05/23 12:0 a.m.112 views

Like Button Rating < 2.6.45 - Arbitrary e-mail Sending

The plugin allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body As a subscriber, run the below command in the web developer console of the browser fetch"/wp-admin/admin-ajax.php?action=likebtntestvotenotification", "headers":...

6.5CVSS0.4AI score0.00277EPSS
Exploits2
Veracode
Veracode
added 2022/04/04 6:45 p.m.16 views

Remote Code Execution

chromium is vulnerable to remote code execution. Lack of proper checking in the Background Fetch API component allows an attacker to upload and execute malicious code on the system under attack...

6.5CVSS4.8AI score0.00227EPSS
Exploits1References4Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/04/01 7:0 a.m.26 views

Chromium: CVE-2022-1139 Inappropriate implementation in Background Fetch API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00227EPSS
Exploits1
Kaspersky
Kaspersky
added 2022/04/01 12:0 a.m.50 views

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

8.8CVSS9.5AI score0.06645EPSS
Exploits15References27
RedhatCVE
RedhatCVE
added 2022/01/13 6:54 a.m.39 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS6.9AI score0.18406EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.11 views

Mozilla Firefox Security Advisory (MFSA2015-115) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.8CVSS6.5AI score0.00243EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/12 12:0 a.m.66 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1339-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1339-1 advisory. - Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the rendere...

9.6CVSS7.5AI score0.62981EPSS
Exploits4References44
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/12 12:0 a.m.52 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1350-1 Rating: important References: 1190765 1191166 1191204 1191463 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963...

9.6CVSS9.2AI score0.62981EPSS
Exploits5References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/10/11 12:0 a.m.49 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1339-1 Rating: important References: 1190765 1191166 1191204 Cross-References: CVE-2021-37956 CVE-2021-37957 CVE-2021-37958 CVE-2021-37959 CVE-2021-37960 CVE-2021-37961 CVE-2021-37962 CVE-2021-37963...

9.6CVSS8.8AI score0.62981EPSS
Exploits4References3
OSV
OSV
added 2021/10/08 10:15 p.m.3 views

CVE-2021-37967

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS8.4AI score
Exploits0References5
NVD
NVD
added 2021/10/08 10:15 p.m.12 views

CVE-2021-37968

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS0.00516EPSS
Exploits0References5
NVD
NVD
added 2021/10/08 10:15 p.m.8 views

CVE-2021-37967

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS0.00816EPSS
Exploits0References5
OSV
OSV
added 2021/10/08 10:15 p.m.5 views

CVE-2021-37968

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS8.4AI score
Exploits0References5
OSV
OSV
added 2021/10/08 10:15 p.m.1 views

DEBIAN-CVE-2021-37968

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.5AI score0.00516EPSS
Exploits0References1
Rows per page
Query Builder