Lucene search
+L

107 matches found

BDU FSTEC
BDU FSTEC
added 2016/08/16 12:0 a.m.10 views

The vulnerability of the Firefox browser, which allows a hacker to obtain information about the last visited pages

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the last visited pages by using the Resource Timing API interface’s calls...

5CVSS6.7AI score0.0223EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2016/07/23 7:59 p.m.6 views

CVE-2016-5137

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs,...

4.3CVSS6.5AI score0.01283EPSS
SaveExploits0References13
OSV
OSV
added 2016/03/05 12:0 a.m.5 views

UBUNTU-CVE-2016-2845

The Content Security Policy CSP implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation report...

5.3CVSS6.8AI score0.02223EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2016/02/17 5:2 a.m.6 views

chromium-browser: navigation bypass in Chrome Instant

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

4.3CVSS7.5AI score0.01197EPSS
SaveExploits0References5
OSV
OSV
added 2016/02/14 2:59 a.m.4 views

CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

4.3CVSS7.3AI score0.01197EPSS
SaveExploits0References10
OSV
OSV
added 2016/02/14 2:59 a.m.4 views

UBUNTU-CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

4.3CVSS6.8AI score0.01197EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2016/02/04 8:53 p.m.48 views

Arpy - Mac OSX Arp Spoof (MITM) Tool

Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Scapy...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2016/02/01 11:59 a.m.2 views

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

4.3CVSS7.3AI score0.01686EPSS
SaveExploits0References9
OSV
OSV
added 2016/02/01 11:59 a.m.4 views

UBUNTU-CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

4.3CVSS7.3AI score0.01686EPSS
SaveExploits0References3
CNVD
CNVD
added 2016/01/23 12:0 a.m.9 views

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-00527)

Apple iOS is Apple's operating system for several smart devices. Apple iOS handles the "a:visited button" CSS selector, which allows an attacker to build a malicious web page and trick the user into parsing it, which can determine whether the user has visited a particular link...

4.3CVSS8.4AI score0.01686EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/08/18 12:0 a.m.8 views

The vulnerability of the Internet Explorer browser, which allows a hacker to gain access to the history of visited pages

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the history of visited pages through image caching errors...

4.3CVSS5.5AI score0.15539EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.21 views

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability (MAC OS X)

The host is installed with Mozilla Firefox and is prone to cache objects history enumeration weakness vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcacheobjenumweaknessvulnmacosx.nasl 7006 2017-08-25 11:51:20Z teissa $ Mozilla Firefox Cache Objects History Enumeration Weakness...

5CVSS9.5AI score0.01818EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.33 views

Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities

The host is installed with Internet Explorer and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbmsiemultinfodiscvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Information Disclosure Vulnerabilities Authors: Soora...

5CVSS6.4AI score0.13659EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.45 views

Mozilla Products Multiple Information Disclosure Vulnerabilities - (Windows)

The host is installed with Mozilla firefox/seamonkey/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultinfodiscvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Products Multiple Information Disclosure Vulnerabilities - Windows Authors:...

5CVSS9.6AI score0.01224EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.27 views

Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability

The host is installed with Internet Explorer and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmsiehistoryinfodiscvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability Authors:...

5CVSS6.6AI score0.09401EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.27 views

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability - Windows

Mozilla Firefox is prone to cache objects history enumeration weakness vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS9.5AI score0.01818EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.32 views

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability - Mac OS X

Mozilla Firefox is prone to cache objects history enumeration weakness vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS9.5AI score0.01818EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2011/12/09 12:0 a.m.21 views

Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability

Internet Explorer is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS5.1AI score0.09401EPSS
SaveExploits2References2
seebug.org
seebug.org
added 2011/12/08 12:0 a.m.12 views

Microsoft Internet Explorer CSS ":visited"信息泄露漏洞

BUGTRAQ ID: 50918 Microsoft Internet Explorer简称MSIE,是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer在实现上存在信息泄露漏洞,远程攻击者可利用此漏洞获取浏览器的浏览历史记录,导致泄露敏感信息 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explor...

6.9AI score
SaveExploits0
Prion
Prion
added 2011/12/07 7:55 p.m.24 views

Design/Logic Flaw

The Cascading Style Sheets CSS implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264...

4.3CVSS5.4AI score0.02597EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder