Lucene search
+L

7398 matches found

The Hacker News
The Hacker News
•added 2020/01/28 4:36 p.m.•113 views

New 'CacheOut' Attack Leaks Data from Intel CPUs, VMs and SGX Enclave

Another month, another speculative execution vulnerability found in Intel processors. If your computer is running any modern Intel CPU built before October 2018, it's likely vulnerable to a newly discovered hardware issue that could allow attackers to leak sensitive data from the OS kernel,...

5.5CVSS0.9AI score0.00564EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/01/23 3:20 p.m.•20 views

chromium-browser: extension message verification error

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension...

8.8CVSS7.3AI score0.01195EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•36 views

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2019-1939)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS6.5AI score0.03423EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•106 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1279)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.7372EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/01/21 2:39 p.m.•37 views

CVE-2020-6380

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension...

8.8CVSS4.5AI score0.01195EPSS
SaveExploits0References3
Wired Threat Level
Wired Threat Level
•added 2020/01/05 12:00 p.m.•56 views

Russia Takes a Big Step Toward Internet Isolation

Russia can't cut its internet off from the rest of the world yet. But a recent test foreshadowed more censorship and repression to come...

4.2AI score
SaveExploits0
Kaspersky
Kaspersky
•added 2019/12/27 12:00 a.m.•82 views

KLA11718 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.5AI score0.06432EPSS
SaveExploits4References3
RedHat Linux
RedHat Linux
•added 2019/12/16 9:09 a.m.•9 views

chromium-browser: Insufficient policy enforcement in navigation

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS7.3AI score0.01311EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2019/12/11 1:21 a.m.•31 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS2.9AI score0.01311EPSS
SaveExploits0References4
OSV
OSV
•added 2019/12/10 10:15 p.m.•11 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS7.9AI score
SaveExploits0References10
OSV
OSV
•added 2019/12/10 10:15 p.m.•5 views

DEBIAN-CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS6.9AI score0.01311EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/10 10:15 p.m.•17 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS6.5AI score0.01311EPSS
SaveExploits0References10
Prion
Prion
•added 2019/12/10 10:15 p.m.•17 views

Design/Logic Flaw

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

4.3CVSS6.3AI score0.01311EPSS
SaveExploits0References10Affected Software7
UbuntuCve
UbuntuCve
•added 2019/12/10 10:15 p.m.•24 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.01311EPSS
SaveExploits0References3
OSV
OSV
•added 2019/12/10 10:15 p.m.•10 views

UBUNTU-CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.01311EPSS
SaveExploits0References4
Mend
Mend
•added 2019/12/10 9:01 p.m.•1 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

7.1CVSS0.01311EPSS
SaveExploits0References15
CVE
CVE
•added 2019/12/10 9:01 p.m.•267 views

CVE-2019-13738

CVE-2019-13738 affects Google Chrome (navigation component) where insufficient policy enforcement allows a remote attacker to bypass site isolation via a crafted HTML page. The issue is in Chrome versions prior to 79.0.3945.79. Remediation per the provided records is to upgrade to the fixed versi...

6.5CVSS6.2AI score0.01311EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
•added 2019/12/10 9:01 p.m.•33 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.4AI score0.01311EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2019/12/10 9:01 p.m.•44 views

CVE-2019-13738

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS7.2AI score0.01311EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/10 12:00 a.m.•2 views

CVE-2019-13738: Improper Privilege Management

Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS6.7AI score0.01311EPSS
SaveExploits0References2
Rows per page
Query Builder