Lucene search
+L

5322 matches found

NVD
NVD
added 2022/08/12 8:15 p.m.26 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.00773EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/12 8:15 p.m.3 views

DEBIAN-CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.9AI score0.00773EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/12 8:15 p.m.26 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.4AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/08/12 8:15 p.m.12 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00773EPSS
SaveExploits0References6
Prion
Prion
added 2022/08/12 8:15 p.m.31 views

Design/Logic Flaw

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.00773EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/08/12 8:15 p.m.6 views

UBUNTU-CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00773EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/08/12 7:36 p.m.71 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.00773EPSS
SaveExploits0
CVE
CVE
added 2022/08/12 7:36 p.m.213 views

CVE-2022-2610

CVE-2022-2610 : Concrete details across connected docs show a Chrome/Chromium vulnerability in Background Fetch due to insufficient policy enforcement, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Google Chrome (Chromium-based), with the root ...

6.5CVSS6.2AI score0.00773EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/08/12 7:36 p.m.42 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.6AI score0.00773EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2022/08/12 7:36 p.m.78 views

CVE-2022-2610

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.00773EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2022/08/12 12:0 a.m.51 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10086-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...

8.8CVSS6.8AI score0.00923EPSS
SaveExploits3References1
Veracode
Veracode
added 2022/08/11 8:23 a.m.36 views

Information Disclosure

chrome is vulnerable to information disclosure. The vulnerability exists due to an Insufficient policy enforcement in Background Fetch allowing an attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.6AI score0.00773EPSS
SaveExploits0References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2022/08/06 12:0 a.m.215 views

Microsoft Edge (Chromium) < 104.0.1293.47 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.47. It is, therefore, affected by multiple vulnerabilities as referenced in the August 5, 2022 advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 - Out of...

9.6CVSS6.9AI score0.02236EPSS
SaveExploits3References41
Mageia
Mageia
added 2022/08/05 9:0 p.m.128 views

Updated chromium-browser-stable packages fix security vulnerability

1325699 High CVE-2022-2603: Use after free in Omnibox. Reported by Anonymous on 2022-05-16 1335316 High CVE-2022-2604: Use after free in Safe Browsing. Reported by Nan Wang@eternalsakura13 and Guang Gong of 360 Alpha Lab on 2022-06-10 1338470 High CVE-2022-2605: Out of bounds read in Dawn. Report...

8.8CVSS0.3AI score0.00923EPSS
SaveExploits3References3
Microsoft CVE
Microsoft CVE
added 2022/08/05 7:0 a.m.46 views

Chromium: CVE-2022-2610 Insufficient policy enforcement in Background Fetch

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00773EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/08/05 5:0 a.m.7 views

CVE-2022-21186

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input...

9.8CVSS7.3AI score0.24865EPSS
SaveExploits1References3
Snyk
Snyk
added 2022/08/04 8:7 a.m.3 views

Malicious Package

Overview gaarf-fetch-cf is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/03 12:0 a.m.47 views

PT-2022-22463 · Percona · Percona Server For Mysql

Name of the Vulnerable Software and Affected Versions: Percona Server for MySQL version 8.0.28-19 Description: An issue in the fetch step function allows attackers to cause a Denial of Service DoS via a SQL query. Recommendations: For Percona Server for MySQL version 8.0.28-19, consider disabling...

7.5CVSS7.5AI score0.0092EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/08/03 12:0 a.m.8 views

Percona Server for MySQL SQL注入漏洞

Percona Server for MySQL is an open source relational database management system. A security vulnerability exists in Percona Server for MySQL version v8.0.28-19, which originates from its fetchstep function that allows attackers to cause a denial of service via a SQL query...

7.5CVSS7.5AI score0.0092EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/08/03 12:0 a.m.50 views

FreeBSD : chromium -- multiple vulnerabilities (96a41723-133a-11ed-be3b-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 96a41723-133a-11ed-be3b-3065ec8fd3ec advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 -...

8.8CVSS7.4AI score0.00923EPSS
SaveExploits3References24
Rows per page
Query Builder