|
248581
|
5.4 |
MEDIUM
Network
|
mcafee
|
network_data_loss_prevention
|
Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request fo…
|
CWE-79
Cross-site Scripting
|
CVE-2017-3933
|
2024-11-21 12:26 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248582
|
6.5 |
MEDIUM
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via I…
|
CWE-20
Improper Input Validation
|
CVE-2017-5076
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248583
|
4.3 |
MEDIUM
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value …
|
CWE-200
Information Exposure
|
CVE-2017-5075
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248584
|
8.0 |
HIGH
Adjacent
|
google
|
chrome
|
A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.
|
CWE-416
Use After Free
|
CVE-2017-5074
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248585
|
8.8 |
HIGH
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory…
|
CWE-416
Use After Free
|
CVE-2017-5073
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248586
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.
|
CWE-20
Improper Input Validation
|
CVE-2017-5072
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248587
|
6.3 |
MEDIUM
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds …
|
CWE-20
Improper Input Validation
|
CVE-2017-5071
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248588
|
6.1 |
MEDIUM
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-…
|
CWE-79
Cross-site Scripting
|
CVE-2017-5069
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248589
|
7.5 |
HIGH
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.
|
CWE-362
Race Condition
|
CVE-2017-5068
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248590
|
6.5 |
MEDIUM
Network
|
google redhat
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted …
|
CWE-20
Improper Input Validation
|
CVE-2017-5067
|
2024-11-21 12:26 |
2017-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|