Lucene search
K

90 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:38 a.m.1 views

SUSE CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.7AI score0.00943EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:33 a.m.1 views

SUSE CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.6AI score0.00372EPSS
Exploits1References4
NVD
NVD
added 2022/07/26 10:15 p.m.18 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS0.00372EPSS
Exploits1References3
OSV
OSV
added 2022/07/26 10:15 p.m.0 views

DEBIAN-CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.8AI score0.00372EPSS
Exploits1References1
OSV
OSV
added 2022/07/26 10:15 p.m.22 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS8AI score
Exploits0References3
OSV
OSV
added 2022/07/26 10:15 p.m.2 views

UBUNTU-CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS5.8AI score0.00372EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2022/07/26 10:15 p.m.41 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.8AI score0.00372EPSS
Exploits1References1
CVE
CVE
added 2022/07/26 9:35 p.m.226 views

CVE-2022-1499

CVE-2022-1499 – Chrome/Chromium WebAuthentication bypass Affected software: Google Chrome (Chromium derivatives) on desktop platforms; affected component: WebAuthentication implementation.Root cause: Inappropriate implementation in WebAuthentication allowed a remote attacker to bypass the same-or...

6.3CVSS6.1AI score0.00372EPSS
Exploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2022/07/26 9:35 p.m.52 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.4AI score0.00372EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/05/03 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2022-0158)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7AI score0.01123EPSS
Exploits23References4
Microsoft CVE
Microsoft CVE
added 2022/04/28 3:56 p.m.47 views

Chromium: CVE-2022-1499 Inappropriate implementation in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS7AI score0.00372EPSS
Exploits1
Veracode
Veracode
added 2022/04/28 2:16 p.m.27 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to an Inappropriate implementation in WebAuthentication...

6.3CVSS3.7AI score0.00372EPSS
Exploits1References4Affected Software2
Kaspersky
Kaspersky
added 2022/04/28 12:0 a.m.36 views

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.4AI score0.01625EPSS
Exploits21References27
FreeBSD
FreeBSD
added 2022/04/26 12:0 a.m.33 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...

8.8CVSS0.2AI score0.01123EPSS
Exploits23References1
Kaspersky
Kaspersky
added 2022/04/26 12:0 a.m.469 views

KLA12517 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Input can...

9.6CVSS9.5AI score0.01144EPSS
Exploits25References3
Veracode
Veracode
added 2022/03/31 11:52 a.m.11 views

Buffer Overflow

Glewlwyd SSO server is vulnerable to Buffer overflow. The vulnerability is due to a webauthentication assertion, which results in Denial of Service...

9.8CVSS6.8AI score0.00315EPSS
Exploits0References3Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2021/12/28 12:0 a.m.53 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...

9.6CVSS9.3AI score0.05459EPSS
Exploits2References4
NVD
NVD
added 2021/12/23 1:15 a.m.15 views

CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.00943EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2021/12/23 1:15 a.m.17 views

CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.00943EPSS
Exploits0References3
CVE
CVE
added 2021/12/23 12:5 a.m.126 views

CVE-2021-38022

CVE-2021-38022 affects Google Chrome’s WebAuthentication component in the Chromium engine, with an inappropriate implementation before 96.0.4664.45 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described in multiple security entries and advisor...

6.5CVSS6.4AI score0.00943EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder