Lucene search
+L

798 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/21 12:00 a.m.•4 views

CVE-2020-6484: Incorrect Default Permissions

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

6.5CVSS6.7AI score0.01528EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/21 12:00 a.m.•4 views

CVE-2020-6460: Undefined Security Weakness

Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a crafted domain name...

6.5CVSS6.9AI score0.0091EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2020/05/20 8:26 a.m.•29 views

CVE-2020-6484

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...

4.3CVSS5.4AI score0.01528EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/05/19 12:00 a.m.•3 views

PT-2020-3516

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to insufficient data validation in the loader of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could enable the...

4.3CVSS0.01461EPSS
SaveExploits0
OSV
OSV
•added 2020/05/06 8:24 a.m.•9 views

OPENSUSE-SU-2020:0615-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 boo1170107: - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an...

9.6CVSS7.9AI score0.014EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2020/05/04 12:00 a.m.•34 views

openSUSE Security Update : chromium (openSUSE-2020-604)

This update for chromium fixes the following issues : Chromium was updated to 81.0.4044.129 boo1170107 : - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an...

9.6CVSS7.5AI score0.014EPSS
SaveExploits1References6
OSV
OSV
•added 2020/05/02 10:22 p.m.•7 views

OPENSUSE-SU-2020:0604-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 81.0.4044.129 boo1170107: - CVE-2020-0561: Fixed a use after free in storage - CVE-2020-6462: Fixed a use after free in task scheduling - CVE-2020-6459: Fixed a use after free in payments - CVE-2020-6460: Fixed an...

9.6CVSS7.9AI score0.014EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2020/04/29 12:00 a.m.•75 views

RHEL 6 : chromium-browser (RHSA-2020:1970)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1970 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 81.0.4044.122. Security Fixes:...

8.8CVSS8AI score0.03265EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•29 views

The vulnerability of Google Chrome’s browser, related to insufficient data validation, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient data validation during downloads. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.8AI score0.00621EPSS
SaveExploits0References9Affected Software4
RedhatCVE
RedhatCVE
•added 2020/04/09 2:06 p.m.•32 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS4.8AI score0.01849EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•7 views

CVE-2020-10831: Insufficient Verification of Data Authenticity

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can trigger an update to arbitrary touch-screen firmware. The Samsung ID is SVE-2019-16013 March 2020...

7.5CVSS7.4AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/02/26 12:00 a.m.•1 views

PT-2020-1985

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description The issue is related to insufficient data authentication in the anycast gateway feature of Cisco NX-OS Software. This could allow an unauthenticated, adjacent attacker to cause a...

4.7CVSS0.00292EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2020/02/11 3:15 p.m.•6 views

CVE-2020-6416

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.1AI score0.0199EPSS
SaveExploits1References12
OSV
OSV
•added 2020/01/30 6:28 p.m.•45 views

MGASA-2020-0070 Updated sqlite3 packages fix security vulnerabilities

Updated sqlite3 packages fix security vulnerabilities: An out of bounds write flaw CVE-2019-13734, insufficient data validation flaw CVE-2019-13750, uninitialized use flaw CVE-2019-13751, and out of bounds read flaws CVE-2019-13752, CVE-2019-13753 in SQLite before 3.31.0. It was discovered that...

8.8CVSS7.1AI score0.06937EPSS
SaveExploits0References9
Mageia
Mageia
•added 2020/01/30 6:28 p.m.•109 views

Updated sqlite3 packages fix security vulnerabilities

Updated sqlite3 packages fix security vulnerabilities: An out of bounds write flaw CVE-2019-13734, insufficient data validation flaw CVE-2019-13750, uninitialized use flaw CVE-2019-13751, and out of bounds read flaws CVE-2019-13752, CVE-2019-13753 in SQLite before 3.31.0. It was discovered that...

8.8CVSS7.4AI score0.06937EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2020/01/15 12:00 a.m.•17 views

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, which stems from insufficient data encryption, allows attackers to bypass existing security measures in the context of current users.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to insufficient data encryption. Exploiting these vulnerabilities can allow attackers to bypass existing security measures when acting remotely...

10CVSS7.7AI score0.02801EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/12/17 12:00 a.m.•75 views

openSUSE Security Update : chromium (openSUSE-2019-2692)

This update for chromium fixes the following issues : Chromium was updated to 79.0.3945.79 boo1158982 - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets -...

8.8CVSS7.2AI score0.06432EPSS
SaveExploits5References38
CVE
CVE
•added 2019/12/10 9:01 p.m.•406 views

CVE-2019-13750

CVE-2019-13750 affects Google Chrome (Chromium) where the SQLite component used by Chrome allowed insufficient data validation, enabling a remote attacker to bypass defense-in-depth via a crafted HTML page. Affected product: Chrome/Chromium with the SQLite library integrated; root cause: data val...

6.5CVSS6.3AI score0.02408EPSS
SaveExploits0References12Affected Software1
OSV
OSV
•added 2019/11/25 3:15 p.m.•10 views

CVE-2019-5875

Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS8.2AI score
SaveExploits0References2
NVD
NVD
•added 2019/11/25 3:15 p.m.•19 views

CVE-2019-5861

Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page...

4.3CVSS5.2AI score0.0064EPSS
SaveExploits0References2
Rows per page
Query Builder