Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

6331 matches found

RedHat Linux
RedHat Linux•added 2023/03/23 11:18 a.m.•23 views

Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory described the issue of dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks...

6.5CVSS7.3AI score0.00347EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux•added 2023/03/23 11:10 a.m.•16 views

Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory described the issue of dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks...

6.5CVSS7.3AI score0.00347EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty•added 2023/03/23 6:50 a.m.•21 views

pathcore.hms.harvard.edu IFRAME Injection vulnerability OBB-3230397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2023/03/23 6:03 a.m.•32 views

mczbase.mcz.harvard.edu IFRAME Injection vulnerability OBB-3230393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2023/03/23 5:51 a.m.•24 views

kiki.huh.harvard.edu IFRAME Injection vulnerability OBB-3230388

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2023/03/23 5:15 a.m.•21 views

maps.cga.harvard.edu IFRAME Injection vulnerability OBB-3230353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Openbugbounty
Openbugbounty•added 2023/03/23 1:33 a.m.•33 views

ads.harvard.edu IFRAME Injection vulnerability OBB-3230342

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2023/03/23 12:00 a.m.•32 views

RHEL 9 : thunderbird (RHSA-2023:1402)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1402 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.9.0. Security Fixes: Mozilla:...

8.8CVSS8AI score0.00719EPSS
SaveExploits0References12
osv_debian
osv_debian•added 2023/03/22 9:15 p.m.•9 views

DEBIAN-CVE-2023-28439

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

6.1CVSS6.9AI score0.00725EPSS
SaveExploits0References1
NVD
NVD•added 2023/03/22 9:15 p.m.•27 views

CVE-2023-28439

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

6.1CVSS5.7AI score0.00725EPSS
SaveExploits0References6
Prion
Prion•added 2023/03/22 9:15 p.m.•74 views

Cross site scripting

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

5.8CVSS6.3AI score0.00725EPSS
SaveExploits0References6Affected Software2
osv_ubuntu
osv_ubuntu•added 2023/03/22 9:15 p.m.•15 views

UBUNTU-CVE-2023-28439

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

6.1CVSS7AI score0.00725EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2023/03/22 9:15 p.m.•60 views

CVE-2023-28439

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

6.1CVSS7AI score0.00725EPSS
SaveExploits0References4
CVE
CVE•added 2023/03/22 8:55 p.m.•483 views

CVE-2023-28439

CKEditor4 contains a cross-site scripting vulnerability affecting the Iframe Dialog and Media Embed plugins. The issue arises from improper input handling and specific initialization/destroy conditions that can trigger JavaScript execution on a page with insufficient CSP. A patch is available in ...

6.1CVSS5.7AI score0.00725EPSS
SaveExploits0References6Affected Software1
Mend
Mend•added 2023/03/22 8:55 p.m.•5 views

CVE-2023-28439

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

6.1CVSS0.00725EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment•added 2023/03/22 8:55 p.m.•23 views

CVE-2023-28439 ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

4.7CVSS6.9AI score0.00725EPSS
SaveExploits0References6
Debian CVE
Debian CVE•added 2023/03/22 8:55 p.m.•111 views

CVE-2023-28439

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

6.1CVSS7AI score0.00725EPSS
SaveExploits0
Cvelist
Cvelist•added 2023/03/22 8:55 p.m.•75 views

CVE-2023-28439 ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

4.7CVSS6.7AI score0.00725EPSS
SaveExploits0References6
osv_cve
osv_cve•added 2023/03/22 8:55 p.m.•35 views

CVE-2023-28439 ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages ...

4.7CVSS7.1AI score
SaveExploits0References8
RedHat Linux
RedHat Linux•added 2023/03/22 10:39 a.m.•12 views

Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory described the issue of dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks...

6.5CVSS7.3AI score0.00347EPSS
SaveExploits0References6
Rows per page
Query Builder