Lucene search
+L

2747 matches found

OpenVAS
OpenVAS
added 2022/01/16 12:0 a.m.19 views

Fedora: Security Advisory for python-celery (FEDORA-2022-1dae017601)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.03877EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/22 9:58 a.m.8 views

SUSE-SU-2021:4150-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Update to version 91.4 MFSA 2021-54 bsc1193485 - CVE-2021-43536: URL leakage when navigating while executing asynchronous function - CVE-2021-43537: Heap buffer overflow when using structured clone - CVE-2021-43538: Missing fullscre...

10CVSS9.2AI score0.0383EPSS
SaveExploits3References41
OSV
OSV
added 2021/12/21 12:15 p.m.7 views

CVE-2021-45252

Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...

9.8CVSS5.8AI score0.01239EPSS
SaveExploits1References1
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/12/20 6:29 a.m.37 views

CoAP Protocol: Definition, Architecture

Professionals involved in IoT network designing or development must have come across CoAP. A dedicatedly set standard by IETF, it works the best when it comes to constrained IoT-enabled solutions. To make you understand CoAP Constrained Application Protocol better, we have prepared this post,...

7AI score
SaveExploits0
OSV
OSV
added 2021/12/13 11:15 a.m.6 views

CVE-2021-24955

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data parameter of the ppgetformsbybuildertype AJAX action before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.4AI score0.00968EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/12/13 11:15 a.m.5 views

CVE-2021-24945

The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtnexportvotes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog...

8CVSS7.2AI score0.00557EPSS
SaveExploits2References2
Veracode
Veracode
added 2021/12/10 7:35 a.m.56 views

Information Disclosure

firefox and thunderbird is vulnerable to information disclosure. The vulnerability exists due to an exposure of the target URL when navigating using asynchronous functions...

6.5CVSS1.6AI score0.0167EPSS
SaveExploits0References13Affected Software7
GithubExploit
GithubExploit
added 2021/12/10 6:16 a.m.13 views

Log4j2Scan

Log4j2Scan This tool is only for learning, research and sel...

7.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2021/12/09 2:46 p.m.6 views

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

6.5CVSS7.4AI score0.0167EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:58 p.m.6 views

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

6.5CVSS7.4AI score0.0167EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:43 p.m.11 views

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

6.5CVSS7.4AI score0.0167EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:41 p.m.7 views

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

6.5CVSS7.4AI score0.0167EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:40 p.m.6 views

Mozilla: URL leakage when navigating while executing asynchronous function

The Mozilla Foundation Security Advisory describes this flaw as: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL...

6.5CVSS7.4AI score0.0167EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/12/08 10:15 p.m.5 views

CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

6.5CVSS6.7AI score0.0167EPSS
SaveExploits0References11
NVD
NVD
added 2021/12/08 10:15 p.m.22 views

CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

6.5CVSS0.0167EPSS
SaveExploits0References10
OSV
OSV
added 2021/12/08 10:15 p.m.1 views

DEBIAN-CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

6.5CVSS7AI score0.0167EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/08 10:15 p.m.23 views

Code injection

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

4.3CVSS6.8AI score0.0167EPSS
SaveExploits0References10Affected Software4
CVE
CVE
added 2021/12/08 9:20 p.m.291 views

CVE-2021-43536

CVE-2021-43536: The connected advisories confirm an information-disclosure/URL leakage flaw triggered when navigating asynchronously in Firefox/Thunderbird prior to fixed releases. Affected: Thunderbird < 91.4.0, Firefox ESR < 91.4.0, Firefox

6.5CVSS7.2AI score0.0167EPSS
SaveExploits0References10Affected Software3
Debian CVE
Debian CVE
added 2021/12/08 9:20 p.m.31 views

CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

6.5CVSS8.4AI score0.0167EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/12/08 9:20 p.m.48 views

CVE-2021-43536

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...

6.5CVSS7.7AI score0.0167EPSS
SaveExploits0
Rows per page
Query Builder