Lucene search
+L

5205 matches found

OSV
OSV
added 2021/03/09 6:15 p.m.13 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.9AI score
SaveExploits0References7
OSV
OSV
added 2021/03/09 6:15 p.m.4 views

DEBIAN-CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.2AI score0.01179EPSS
SaveExploits1References1
NVD
NVD
added 2021/03/09 6:15 p.m.38 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS0.00411EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/09 6:15 p.m.9 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS6.6AI score0.00411EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/03/09 6:15 p.m.23 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.01179EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/03/09 6:15 p.m.6 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS6.5AI score0.00411EPSS
SaveExploits1References2
Prion
Prion
added 2021/03/09 6:15 p.m.23 views

Design/Logic Flaw

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01179EPSS
SaveExploits1References7Affected Software3
Prion
Prion
added 2021/03/09 6:15 p.m.31 views

Design/Logic Flaw

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

3.5CVSS7.3AI score0.00411EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/03/09 6:15 p.m.5 views

UBUNTU-CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.01179EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2021/03/09 5:46 p.m.64 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.6AI score0.01179EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/03/09 5:46 p.m.22 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.6AI score0.01179EPSS
SaveExploits1References7
CVE
CVE
added 2021/03/09 5:46 p.m.204 views

CVE-2021-21175

In Google Chrome, CVE-2021-21175 corresponds to an inappropriate implementation in the Site Isolation feature prior to 89.0.4389.72. The issue allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected product: Google Chrome (Site Isolation). Root cause: improper imp...

6.5CVSS6.2AI score0.01179EPSS
SaveExploits1References7Affected Software1
Debian CVE
Debian CVE
added 2021/03/09 5:46 p.m.32 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.2AI score0.01179EPSS
SaveExploits1
Veracode
Veracode
added 2021/03/09 2:26 p.m.22 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists through the implementation of the Site isolation feature, allowing cross-origin data to be leaked...

6.5CVSS1.8AI score0.01179EPSS
SaveExploits1References11Affected Software2
Veracode
Veracode
added 2021/03/09 4:21 a.m.22 views

Insecure Access Controls

chromium uses insecure access controls. An attacker is able to install a malicious extension to bypass site isolation via a malicious Chrome Extension due to insecure access control in extensions...

5.4CVSS4.1AI score0.0118EPSS
SaveExploits0References12Affected Software1
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.11 views

PT-2021-13859 · Unknown · Ansible Tower

Name of the Vulnerable Software and Affected Versions: ansible-tower affected versions not specified Description: A flaw was found in the default installation of ansible-tower, allowing an attacker to elevate privileges from a low-privileged user to the awx user from outside the isolated...

6.7CVSS6.2AI score0.00411EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2021/03/08 9:33 p.m.39 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS2.7AI score0.00411EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2021/03/05 12:0 a.m.243 views

container-tools:2.0 security update

buildah 1.11.6-8.0.1 - Reduce unnecessary writable mounts in NaiveDiffDriver Orabug: 31025483 - Fixes troubles with oracle registry login Orabug: 29937283 1.11.6-8 - exclude i686 arch - Related: 1821193 1.11.6-7 - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file...

9.3CVSS7.1AI score0.02668EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2021/03/04 8:4 p.m.31 views

Chromium CVE-2021-21175: Inappropriate implementation in Site isolation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.01179EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2021/03/04 12:0 a.m.51 views

KLA12107 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An...

8.8CVSS9.6AI score0.23847EPSS
SaveExploits24References36
Rows per page
Query Builder