Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

7111 matches found

NVD
NVD•added 2019/02/28 6:29 p.m.•66 views

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS7.1AI score0.01549EPSS
SaveExploits0References15
NVD
NVD•added 2019/02/28 6:29 p.m.•21 views

CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS5.6AI score0.01093EPSS
SaveExploits0References4
osv_cve
osv_cve•added 2019/02/28 6:29 p.m.•24 views

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS8.7AI score
SaveExploits0References15
osv_debian
osv_debian•added 2019/02/28 6:29 p.m.•8 views

DEBIAN-CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS7.3AI score0.01093EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2019/02/28 6:29 p.m.•12 views

DEBIAN-CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS8.6AI score0.01549EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2019/02/28 6:29 p.m.•17 views

UBUNTU-CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS7.2AI score0.01093EPSS
SaveExploits0References9
Prion
Prion•added 2019/02/28 6:29 p.m.•28 views

Cross site scripting

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

4.3CVSS6.8AI score0.01549EPSS
SaveExploits0References15Affected Software11
UbuntuCve
UbuntuCve•added 2019/02/28 6:29 p.m.•37 views

CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS6.8AI score0.01093EPSS
SaveExploits0References8
Prion
Prion•added 2019/02/28 6:29 p.m.•27 views

Cross site scripting

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

4.3CVSS6.6AI score0.01093EPSS
SaveExploits0References4Affected Software3
Debian CVE
Debian CVE•added 2019/02/28 6:00 p.m.•45 views

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS8.4AI score0.01549EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2019/02/28 6:00 p.m.•71 views

CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS7.3AI score0.01093EPSS
SaveExploits0
CVE
CVE•added 2019/02/28 6:00 p.m.•299 views

CVE-2018-18494

CVE-2018-18494 is a same-origin policy violation in Thunderbird/Firefox components caused by using the location property with performance.getEntries to steal cross-origin URL entries. Affected: Thunderbird < 60.4, Firefox ESR < 60.4, Firefox

6.5CVSS7AI score0.01549EPSS
SaveExploits0References15Affected Software2
CVE
CVE•added 2019/02/28 6:00 p.m.•166 views

CVE-2018-18499

CVE-2018-18499 is a same-origin policy vulnerability in Mozilla Firefox and Thunderbird where a page using a meta http-equiv="refresh" redirects to another site and allows theft of cross-origin URL entries via performance.getEntries(). Affected: Firefox < 62, Firefox ESR < 60.2, Thunderbird

6.5CVSS5.6AI score0.01093EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist•added 2019/02/28 6:00 p.m.•44 views

CVE-2018-18499

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

5.7AI score0.01093EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2019/02/28 6:00 p.m.•30 views

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

7.2AI score0.01549EPSS
SaveExploits0References15
Mend
Mend•added 2019/02/28 6:00 p.m.•6 views

CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

7.1CVSS0.01549EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus•added 2019/02/28 12:00 a.m.•40 views

openSUSE Security Update : MozillaThunderbird (openSUSE-2019-251)

This update for MozillaThunderbird to version 60.5.1 fixes the following issues : Security vulnerabilities addressed MSFA 2019-03 MSFA 2018-31 MFSA 2019-06 bsc1122983 bsc1119105 bsc1125330 : - CVE-2018-18356: Fixed a Use-after-free in Skia. - CVE-2019-5785: Fixed an Integer overflow in Skia. -...

10CVSS8.1AI score0.12658EPSS
SaveExploits1References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2019/02/28 12:00 a.m.•8 views

CVE-2018-18499: Origin Validation Error

A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS7.9AI score0.01093EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2019/02/28 12:00 a.m.•9 views

CVE-2018-18494: Origin Validation Error

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

6.5CVSS7.8AI score0.01549EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux•added 2019/02/26 12:00 a.m.•215 views

Security update for MozillaThunderbird (important)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:0249-1 Rating: important References: 1122983 1125330 Cross-References: CVE-2016-5824 CVE-2018-12405 CVE-2018-17466 CVE-2018-18335 CVE-2018-18356 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494...

10CVSS7.5AI score0.12658EPSS
SaveExploits1References2
Rows per page
Query Builder