Lucene search
+L

7402 matches found

OSV
OSV
•added 2021/03/09 6:15 p.m.•8 views

DEBIAN-CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/09 6:15 p.m.•26 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.01179EPSS
SaveExploits1References7
OSV
OSV
•added 2021/03/09 6:15 p.m.•17 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS6.6AI score0.00411EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/09 6:15 p.m.•43 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS0.00411EPSS
SaveExploits1References1
Prion
Prion
•added 2021/03/09 6:15 p.m.•28 views

Design/Logic Flaw

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01179EPSS
SaveExploits1References7Affected Software3
Prion
Prion
•added 2021/03/09 6:15 p.m.•36 views

Design/Logic Flaw

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

3.5CVSS7.3AI score0.00411EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•13 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS6.5AI score0.00411EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•10 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References11
OSV
OSV
•added 2021/03/09 6:15 p.m.•9 views

UBUNTU-CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2021/03/09 6:15 p.m.•25 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/03/09 5:46 p.m.•34 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.6AI score0.01179EPSS
SaveExploits1References7
CVE
CVE
•added 2021/03/09 5:46 p.m.•220 views

CVE-2021-21175

In Google Chrome, CVE-2021-21175 corresponds to an inappropriate implementation in the Site Isolation feature prior to 89.0.4389.72. The issue allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected product: Google Chrome (Site Isolation). Root cause: improper imp...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References7Affected Software1
AlpineLinux
AlpineLinux
•added 2021/03/09 5:46 p.m.•77 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/03/09 5:46 p.m.•40 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1
Veracode
Veracode
•added 2021/03/09 2:26 p.m.•26 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists through the implementation of the Site isolation feature, allowing cross-origin data to be leaked...

6.5CVSS6.9AI score0.01179EPSS
SaveExploits1References11Affected Software2
Veracode
Veracode
•added 2021/03/09 4:21 a.m.•25 views

Insecure Access Controls

chromium uses insecure access controls. An attacker is able to install a malicious extension to bypass site isolation via a malicious Chrome Extension due to insecure access control in extensions...

5.4CVSS4.1AI score0.0118EPSS
SaveExploits0References12Affected Software1
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•15 views

PT-2021-13859 · Unknown · Ansible Tower

Name of the Vulnerable Software and Affected Versions: ansible-tower affected versions not specified Description: A flaw was found in the default installation of ansible-tower, allowing an attacker to elevate privileges from a low-privileged user to the awx user from outside the isolated...

6.7CVSS6.2AI score0.00411EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•5 views

CVE-2021-21175: Origin Validation Error

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.3AI score0.01179EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•5 views

CVE-2021-20253: Files or Directories Accessible to External Parties

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS5.8AI score0.00411EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2021/03/08 9:33 p.m.•44 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS2.7AI score0.00411EPSS
SaveExploits1References3
Rows per page
Query Builder