Lucene search
+L

7389 matches found

BDU FSTEC
BDU FSTEC
•added 2021/03/30 12:00 a.m.•22 views

Vulnerability of the check_output function in output.c. SUID in a isolated programming environment. Firejail, due to the lack of measures to neutralize special elements, allows a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the checkoutput function of output.c, with the SUID attribute and a isolated programming environment like Firejail, is related to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise i...

7.8CVSS7.4AI score0.01464EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/03/30 12:00 a.m.•20 views

Vulnerability of the check_output function in output.c. SUID in a isolated programming environment. Firejail, due to the lack of measures to neutralize special elements, allows a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the checkoutput function in output.c. The SUID attribute in the isolated programming environment of Firejail indicates that there are no measures in place to neutralize this vulnerability. Exploiting this vulnerability could allow a remote attacker to access confidential data...

9.8CVSS7.8AI score0.04098EPSS
SaveExploits0References11Affected Software5
Wired Threat Level
Wired Threat Level
•added 2021/03/23 1:00 p.m.•53 views

‘Browser Isolation’ Takes On Entrenched Web Threats

Cloudflare says it’s possible to build a version of the notoriously slow and buggy tool without compromising on speed...

3.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2021/03/20 9:41 p.m.•71 views

CVE-2018-3620

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of...

5.6CVSS6.5AI score0.84172EPSS
SaveExploits6References2
Akamai Blog
Akamai Blog
•added 2021/03/15 10:15 p.m.•419 views

Microsoft Exchange and Verkada Hacks: Isolate Your Apps and APIs from the Internet Cesspool

It's been an interesting start to March in terms of public security incidents. This month kicked off with multiple zero-day exploits being used to attack on-premises versions of Microsoft Exchange Server. And, as if that wasn't enough, that attack was quickly followed by the news that a hacktivis...

7.5CVSS8.3AI score0.99996EPSS
SaveExploits66
BDU FSTEC
BDU FSTEC
•added 2021/03/15 12:00 a.m.•18 views

The vulnerability of the browser isolation function of Google Chrome allows a violator to compromise the confidentiality and accessibility of protected information.

The vulnerability of the browser isolation function in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of protected information...

5.3CVSS7.5AI score0.01179EPSS
SaveExploits1References11Affected Software6
OSV
OSV
•added 2021/03/09 6:15 p.m.•7 views

DEBIAN-CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References1
OSV
OSV
•added 2021/03/09 6:15 p.m.•17 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.9AI score
SaveExploits0References7
NVD
NVD
•added 2021/03/09 6:15 p.m.•26 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.01179EPSS
SaveExploits1References7
OSV
OSV
•added 2021/03/09 6:15 p.m.•14 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS6.6AI score0.00411EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/09 6:15 p.m.•43 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS0.00411EPSS
SaveExploits1References1
Prion
Prion
•added 2021/03/09 6:15 p.m.•36 views

Design/Logic Flaw

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

3.5CVSS7.3AI score0.00411EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/03/09 6:15 p.m.•27 views

Design/Logic Flaw

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.2AI score0.01179EPSS
SaveExploits1References7Affected Software3
UbuntuCve
UbuntuCve
•added 2021/03/09 6:15 p.m.•24 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•11 views

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

6.7CVSS6.5AI score0.00411EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•10 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References11
OSV
OSV
•added 2021/03/09 6:15 p.m.•8 views

UBUNTU-CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/03/09 5:46 p.m.•33 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.6AI score0.01179EPSS
SaveExploits1References7
CVE
CVE
•added 2021/03/09 5:46 p.m.•217 views

CVE-2021-21175

In Google Chrome, CVE-2021-21175 corresponds to an inappropriate implementation in the Site Isolation feature prior to 89.0.4389.72. The issue allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected product: Google Chrome (Site Isolation). Root cause: improper imp...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1References7Affected Software1
AlpineLinux
AlpineLinux
•added 2021/03/09 5:46 p.m.•76 views

CVE-2021-21175

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01179EPSS
SaveExploits1
Rows per page
Query Builder