Lucene search
+L

8696 matches found

NVD
NVD
•added 2022/11/30 12:15 a.m.•23 views

CVE-2022-4188

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00587EPSS
SaveExploits0References4
Prion
Prion
•added 2022/11/30 12:15 a.m.•23 views

Input validation

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS4.9AI score0.00587EPSS
SaveExploits0References4Affected Software1
osv-ubuntu
osv-ubuntu
•added 2022/11/30 12:15 a.m.•16 views

UBUNTU-CVE-2022-4188

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.7AI score0.00587EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/11/30 12:15 a.m.•35 views

CVE-2022-4188

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.8AI score0.00587EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2022/11/29 7:01 a.m.•64 views

Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.4ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0

Summary Synthetic Playback Agent has addressed the following vulnerabilities: CVE-2022-42932, CVE-2022-40956, CVE-2022-42928, CVE-2022-42929, CVE-2022-42927, CVE-2022-40962, CVE-2022-40958, CVE-2022-40960, CVE-2022-40957, CVE-2022-40959 Vulnerability Details CVEID:CVE-2022-42932 DESCRIPTION:...

8.8CVSS9.2AI score0.01407EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2022/11/29 12:00 a.m.•44 views

CVE-2022-4188

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

5.4AI score0.00587EPSS
SaveExploits0References4
Mend
Mend
•added 2022/11/29 12:00 a.m.•3 views

CVE-2022-4188

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS0.00587EPSS
SaveExploits0References6
CVE
CVE
•added 2022/11/29 12:00 a.m.•225 views

CVE-2022-4188

CVE-2022-4188 affects Google Chrome on Android before 108.0.5359.71, due to insufficient validation of untrusted input in CORS. This allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue is categorized as Medium severity (CVSS 3.1: 4.3). A fix was released ...

4.3CVSS4.8AI score0.00587EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2022/11/29 12:00 a.m.•73 views

CVE-2022-4188

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00587EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/29 12:00 a.m.•2 views

CVE-2022-4188: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00587EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/11/19 12:00 a.m.•43 views

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2022:4085-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4085-1 advisory. - Fixed various security issues MFSA 2022-49, bsc1205270: CVE-2022-45403 bmo1762078 Service...

9.8CVSS6.7AI score0.0105EPSS
SaveExploits0References37
Huntr
Huntr
•added 2022/11/04 10:00 p.m.•16 views

CSRF on SSL certificates deletion

šŸ“œ Description Cross-site request forgery also known as CSRF is a web security vulnerability that allows an attacker to induce users to perform actions that they do not intend to perform using form submissions. It allows an attacker to partly circumvent the same origin policy, which is designed to...

0.3AI score
SaveExploits0
Veracode
Veracode
•added 2022/11/02 4:58 p.m.•25 views

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists because same-origin policy violation which allows to an attacker to cause application crashes by providing a maliciously crafted input to the librarys...

8.1CVSS7.9AI score0.00426EPSS
SaveExploits0References5Affected Software5
NVD
NVD
•added 2022/11/01 8:15 p.m.•27 views

CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS0.0057EPSS
SaveExploits1References2
osv-debian
osv-debian
•added 2022/11/01 8:15 p.m.•13 views

DEBIAN-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS7.5AI score0.0057EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2022/11/01 8:15 p.m.•32 views

CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS7.9AI score
SaveExploits0References2
Prion
Prion
•added 2022/11/01 8:15 p.m.•27 views

Design/Logic Flaw

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

4.3CVSS6.5AI score0.0057EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/11/01 8:15 p.m.•38 views

CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS6.9AI score0.0057EPSS
SaveExploits1References1
osv-ubuntu
osv-ubuntu
•added 2022/11/01 8:15 p.m.•13 views

UBUNTU-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS7AI score0.0057EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/01 12:00 a.m.•3 views

CVE-2022-3310: Client-Side Enforcement of Server-Side Security

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

6.5CVSS6.8AI score0.0057EPSS
SaveExploits1References2
Rows per page
Query Builder