Lucene search
+L

6271 matches found

osv-ubuntu
osv-ubuntu
•added 2025/10/14 1:15 p.m.•13 views

UBUNTU-CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

6.5CVSS6AI score0.00235EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/10/14 12:27 p.m.•3 views

CVE-2025-11716 Sandboxed iframes allowed links to open in external apps (Android only)

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

6AI score0.00235EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/14 12:27 p.m.•22 views

CVE-2025-11716 Sandboxed iframes allowed links to open in external apps (Android only)

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

0.00235EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/14 12:27 p.m.•76 views

CVE-2025-11716

Mozilla Firefox and Mozilla Thunderbird versions prior to 144.0 are vulnerable to a security bypass where links in a sandboxed iframe can open external apps on Android without the required "allow-" permission. This flaw allows attackers to bypass security restrictions. Remediation involves updati...

6.5CVSS6AI score0.00235EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2025/10/14 12:27 p.m.•8 views

CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

6.5CVSS6AI score0.00235EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/10/14 12:27 p.m.•20 views

CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

6.5CVSS6AI score0.00235EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•99 views

KLA89242 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of...

9.8CVSS7.8AI score0.00509EPSS
SaveExploits0References3
Mozilla
Mozilla
•added 2025/10/14 12:00 a.m.•41 views

Security Vulnerabilities fixed in Firefox 144 — Mozilla

Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...

9.8CVSS8AI score0.00509EPSS
SaveExploits0References15Affected Software1
Kaspersky
Kaspersky
•added 2025/10/14 12:00 a.m.•98 views

KLA89245 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack, spoof user interface. Below is a complete...

9.8CVSS7.7AI score0.00509EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•4 views

CVE-2025-11716: Improper Access Control

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

6.5CVSS6AI score0.00235EPSS
SaveExploits0References1
Mozilla
Mozilla
•added 2025/10/14 12:00 a.m.•31 views

Security Vulnerabilities fixed in Thunderbird 144 — Mozilla

Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...

9.8CVSS8AI score0.00509EPSS
SaveExploits0References11Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•14 views

PT-2025-41904

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists where links within a sandboxed iframe can trigger the opening of an external application on Android devices, bypassing the necessary "allow-" permissions...

10CVSS6.9AI score0.10609EPSS
SaveExploits0References248
CNVD
CNVD
•added 2025/10/13 12:00 a.m.•15 views

Hostel Management System Clickjacking Vulnerability

Hostel Management System is a hostel management system. Hostel Management System is vulnerable to clickjacking, which occurs when the program does not adequately protect HTML iframes.No details of the vulnerability are available at this time...

5.4CVSS6.8AI score0.00216EPSS
SaveExploits1References1
The Hacker News
The Hacker News
•added 2025/10/08 4:43 p.m.•17 views

Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks

Cybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. "Site visitors get injected content that was drive-by malware like fake Cloudflare verification," Sucuri...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2006-7004

Malware in sbrugna...

10CVSS6.4AI score0.02279EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-4357

Malware in sbrugna...

6.1CVSS6.3AI score0.00843EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2010-1435

Malware in sbrugna...

4.3CVSS6AI score0.02597EPSS
SaveExploits0References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-19517

Malware in sbrugna...

7.3CVSS6.3AI score0.00603EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2013-5244

Malware in sbrugna...

3.5CVSS5.8AI score0.00759EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2004-2299

Malware in sbrugna...

5CVSS6.4AI score0.14538EPSS
SaveExploits1References4
Rows per page
Query Builder