Lucene search
K

7 matches found

ATTACKERKB
ATTACKERKB
added 6 days ago5 views

CVE-2026-49202

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing CORS rules that allow cross-site theft...

8.8CVSS5.7AI score0.0006EPSS
Exploits0References2
OSV
OSV
added 2024/09/11 5:15 a.m.1 views

CVE-2024-1656

Affected versions of Octopus Server had a weak content security policy...

2.6CVSS5.8AI score
Exploits0References1
CNVD
CNVD
added 2023/03/13 12:0 a.m.31 views

Google Chrome Navigation component code issue vulnerability

Google Chrome is a web browser from Google, an American company. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Navigation component. A remote attacker can exploit the vulnerability to bypass the...

4.3CVSS6AI score0.00037EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.1 views

The vulnerability of the PopupBlocker component in the Google Chrome web browser, related to improper authorization, allows a hacker to compromise data integrity.

The vulnerability of the PopupBlocker component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created iframe...

6.5CVSS7.3AI score0.1671EPSS
Exploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.2 views

The vulnerability of the Content Security Policy implementation in Google Chrome’s web browser, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of the Content Security Policy mechanism in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

6.5CVSS7AI score0.00203EPSS
Exploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.3 views

The vulnerability of the iFrameSandbox component in the Google Chrome web browser, related to improper authorization, allows a malicious actor to compromise data integrity.

The vulnerability of the iFrameSandbox component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

6.5CVSS7AI score0.00277EPSS
Exploits1References11Affected Software5
Hacker One
Hacker One
added 2018/04/18 8:7 a.m.15 views

Passit: Weak Password Policy on Signup

Hi Team, i would like to let you know about password management issue. PoC: ======== 1. Navigate to signup page. 2. Fill you details and give password as simple as 123123. 3. You can see you will be registered and there is no strong enforcement. FIx: ------ Use complex password management. Regard...

0.6AI score
Exploits0
Rows per page
Query Builder