Lucene search
+L

829 matches found

Cvelist
Cvelist
added 2019/09/27 5:22 p.m.22 views

CVE-2019-11733

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

8.9AI score0.01411EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2019/09/27 5:22 p.m.90 views

CVE-2019-11733

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

9.8CVSS9AI score0.01411EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/09/12 10:55 a.m.7 views

firefox: stored passwords in 'Saved Logins' can be copied without master password entry

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

9.8CVSS7.2AI score0.01411EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2019/09/12 10:16 a.m.8 views

firefox: stored passwords in 'Saved Logins' can be copied without master password entry

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

9.8CVSS7.2AI score0.01411EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2019/09/04 8:14 p.m.5 views

firefox: stored passwords in 'Saved Logins' can be copied without master password entry

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

9.8CVSS7.2AI score0.01411EPSS
SaveExploits0References5
OSV
OSV
added 2019/08/16 7:23 p.m.5 views

USN-4101-1 firefox vulnerability

It was discovered that passwords could be copied to the clipboard from the "Saved Logins" dialog without entering the master password, even when a master password has been set. A local attacker could potentially exploit this to obtain saved passwords...

9.8CVSS6.8AI score0.01411EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2019/08/16 7:23 p.m.87 views

USN-4101-1: Firefox vulnerability

It was discovered that passwords could be copied to the clipboard from the "Saved Logins" dialog without entering the master password, even when a master password has been set. A local attacker could potentially exploit this to obtain saved passwords...

9.8CVSS7.6AI score0.01411EPSS
SaveExploits0
OSV
OSV
added 2019/08/16 12:0 a.m.3 views

UBUNTU-CVE-2019-11733

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

9.8CVSS6.8AI score0.01411EPSS
SaveExploits0References4
Mozilla
Mozilla
added 2019/08/14 12:0 a.m.100 views

Stored passwords in 'Saved Logins' can be copied without master password entry — Mozilla

When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password ...

9.8CVSS9.3AI score0.01411EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.47 views

Amazon Linux 2 : thunderbird (ALAS-2019-1267)

When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even those that did...

9.8CVSS7.8AI score0.20271EPSS
SaveExploits2References8
NVD
NVD
added 2019/07/23 2:15 p.m.23 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS6.8AI score0.20271EPSS
SaveExploits0References13
Prion
Prion
added 2019/07/23 2:15 p.m.25 views

Design/Logic Flaw

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

4.3CVSS6.6AI score0.20271EPSS
SaveExploits0References13Affected Software5
Debian CVE
Debian CVE
added 2019/07/23 1:16 p.m.65 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS7.8AI score0.20271EPSS
SaveExploits0
OSV
OSV
added 2019/07/22 6:15 p.m.21 views

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

3.3CVSS6.5AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2019/07/22 5:30 p.m.62 views

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

4.3CVSS5.2AI score0.01348EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/07/11 12:0 a.m.46 views

Mozilla Firefox ESR < 60.8

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-22 advisory. - A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in...

9.8CVSS7.9AI score0.20271EPSS
SaveExploits2References11
Oracle linux
Oracle linux
added 2019/07/10 12:0 a.m.104 views

libvirt security update

5.0.0-9.el7 - qemu: remove cpuhostmask and cpuguestmask from virCaps structure Wim ten Have Orabug: 29956508 5.0.0-8.el7 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections Jan Tomko Orabug: 29955742 CVE-2019-10161 - domain: Define explicit flags for saved image xml Eric Blake...

8.8CVSS1AI score0.01566EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.6 views

Vulnerabilities in the web interface of the Cisco Identity Services Engine, a platform for managing network policies, allow attackers to gain access to protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine management platform relates to insufficient protection of saved passwords when configuring pages on the administrator portal. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

4.3CVSS5.5AI score0.01281EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.7 views

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to gain access to protected information.

The vulnerability of the Cisco Unified Communications Manager web interface relates to insufficient protection for saved passwords during the loading of configuration pages. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

4.3CVSS5.8AI score0.01491EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2019/02/19 12:0 a.m.7 views

February 19, 2019—KB4487016 (Preview of Monthly Rollup)

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder