Lucene search
+L

9236 matches found

ATTACKERKB
ATTACKERKB
added 2020/03/23 4:15 p.m.1 views

CVE-2020-6420

Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

8.8CVSS7.7AI score0.01327EPSS
SaveExploits0References5
OSV
OSV
added 2020/03/23 4:15 p.m.4 views

UBUNTU-CVE-2020-6420

Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

8.8CVSS7.1AI score0.01327EPSS
SaveExploits0References2
Prion
Prion
added 2020/03/23 4:15 p.m.21 views

Design/Logic Flaw

Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.8CVSS7.7AI score0.01327EPSS
SaveExploits0References3Affected Software3
CVE
CVE
added 2020/03/20 1:50 p.m.261 views

CVE-2020-6420

CVE-2020-6420 affects Google Chrome (media component). The issue is insufficient policy enforcement that allows a remote attacker to bypass the same-origin policy via a crafted HTML page, enabling information disclosure and potential further actions. Affected versions are Chrome before 80.0.3987....

8.8CVSS7.7AI score0.01327EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2020/03/20 1:50 p.m.22 views

CVE-2020-6420

Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

8.8CVSS8.6AI score0.01327EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/20 12:0 a.m.37 views

Fedora 30 : webkit2gtk3 (2020-f3fa778924)

Update to WebKitGTK 2.28.0. - Add API to enable Process Swap on Cross-site Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox...

9.8CVSS6.7AI score0.04987EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/18 7:15 p.m.10 views

CVE-2019-12121

An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected...

7.5CVSS7.2AI score0.00725EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/16 4:15 p.m.2 views

DEBIAN-CVE-2020-1740

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...

4.7CVSS6.5AI score0.00377EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/16 2:15 a.m.6 views

CVE-2020-5546

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows an attacker on the same network segment to stop the network functio...

8.8CVSS5.8AI score0.00901EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/16 12:0 a.m.56 views

GLSA-202003-22 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-22 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : A remote attacker could execute arbitrary code, cause a...

9.3CVSS7.5AI score0.09543EPSS
SaveExploits6References40
Gentoo Linux
Gentoo Linux
added 2020/03/15 12:0 a.m.153 views

WebkitGTK+: Multiple vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the...

9.3CVSS3AI score0.09543EPSS
SaveExploits6
RedHat Linux
RedHat Linux
added 2020/03/11 1:8 p.m.7 views

Ansible: two random password lookups in same task return same value

A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords a...

5.5CVSS6.6AI score0.00439EPSS
SaveExploits1References5
CNVD
CNVD
added 2020/03/11 12:0 a.m.12 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-16693)

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 74. The vulnerability can be exploited to read local files via a fetch request from a web extension with all-urls...

7.5CVSS8.1AI score0.01465EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/03/10 4:8 p.m.16 views

chromium-browser: Insufficient policy enforcement in media

Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

8.8CVSS7.4AI score0.01327EPSS
SaveExploits0References5
OSV
OSV
added 2020/03/10 12:0 a.m.14 views

UBUNTU-CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...

7.5CVSS7.2AI score0.01465EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.58 views

The vulnerability of the way predictor implementation in AMD CPUs’ L1D cache architecture allows a hacker to gain access to memory on the same CPU’s physical core.

The vulnerability of the way predictor’s implementation for first-level cache data on AMD CPUs’ L1D cache relates to the fact that accessing the same memory cell from a different virtual address may cause that cell to be evicted from the L1D cache. Exploiting this vulnerability could allow a remo...

8.1CVSS5.5AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2020/03/06 3:10 p.m.35 views

CVE-2020-6420

Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

8.8CVSS3.1AI score0.01327EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/03/06 12:0 a.m.28 views

Insecure Cross-Origin Resource Sharing Configuration

Cross Origin Resource Sharing CORS is an HTML5 technology which gives modern web browsers the ability to bypass restrictions implemented by the Same Origin Policy. The Same Origin Policy requires that both the JavaScript and the page are loaded from the same domain in order to allow JavaScript to...

7.4AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/03/03 3:29 p.m.16 views

kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver

A vulnerability was found in the Linux kernel's Marvell WiFi chip driver. Where, while parsing vendor-specific informational attributes, an attacker on the same WiFi physical network segment could cause a system crash, resulting in a denial of service, or potentially execute arbitrary code. This...

7.8CVSS7.3AI score0.00909EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/03 8:41 a.m.10 views

kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver

A vulnerability was found in the Linux kernel's Marvell WiFi chip driver. Where, while parsing vendor-specific informational attributes, an attacker on the same WiFi physical network segment could cause a system crash, resulting in a denial of service, or potentially execute arbitrary code. This...

7.8CVSS7.3AI score0.00909EPSS
SaveExploits1References5
Rows per page
Query Builder