Lucene search
+L

6500 matches found

OSV
OSV
added 2024/01/23 2:15 p.m.11 views

UBUNTU-CVE-2024-0749

A phishing site could have repurposed an about: dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox 122 and Thunderbird 115.7...

4.3CVSS7.2AI score0.00333EPSS
SaveExploits0References11
OSV
OSV
added 2024/01/23 2:15 p.m.7 views

UBUNTU-CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS7.4AI score0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/01/23 1:48 p.m.4 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

8.9AI score0.00368EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/23 1:48 p.m.35 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

5.8AI score0.00368EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/23 1:48 p.m.142 views

CVE-2024-0748

CVE-2024-0748 concerns Mozilla Firefox where a compromised content process could update the document URI, enabling an attacker to set an arbitrary URI in the address bar or history. The issue affects Firefox versions earlier than 122 and is addressed by Mozilla in MFSA2024-01, which notes fixes i...

4.3CVSS5.3AI score0.00368EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2024/01/23 1:48 p.m.60 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS7.2AI score0.00368EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/01/23 1:48 p.m.35 views

CVE-2024-0749

A phishing site could have repurposed an about: dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox 122 and Thunderbird 115.7...

6AI score0.00333EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/01/23 1:48 p.m.30 views

CVE-2024-0749

A phishing site could have repurposed an about: dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox 122 and Thunderbird 115.7...

6AI score0.00333EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/01/23 12:00 a.m.4 views

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

4.3CVSS8.6AI score0.00333EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2024/01/23 12:00 a.m.29 views

CVE-2024-0748

A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox 122...

4.3CVSS6.4AI score0.00368EPSS
SaveExploits0References5
Mozilla
Mozilla
added 2024/01/22 12:00 a.m.40 views

Security Vulnerabilities fixed in Focus for iOS 122 — Mozilla

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. An attacker could execut...

7.5CVSS7.7AI score0.00387EPSS
SaveExploits0References2Affected Software1
Amazon
Amazon
added 2024/01/22 12:00 a.m.9 views

Important: webkitgtk4

Issue Overview: Impact: Visiting a website that frames malicious content may lead to UI spoofing. Description: The issue was addressed with improved UI handling. CVE-2022-32919 A website may be able to track the websites a user visited in Safari private browsing mode. CVE-2022-32933 A spoofing...

8.8CVSS8.7AI score0.28967EPSS
SaveExploits4
Amazon
Amazon
added 2024/01/22 12:00 a.m.107 views

Important: webkitgtk4

Issue Overview: Impact: Visiting a website that frames malicious content may lead to UI spoofing. Description: The issue was addressed with improved UI handling. CVE-2022-32919 A website may be able to track the websites a user visited in Safari private browsing mode. CVE-2022-32933 A spoofing...

8.8CVSS8.8AI score0.28967EPSS
SaveExploits3
Fedora
Fedora
added 2024/01/18 1:47 a.m.43 views

[SECURITY] Fedora 39 Update: zbar-0.23.93-1.fc39

ZBar Bar Code Reader is an open source software suite for reading bar codes from various sources, such as video streams, image files and raw intensity sensors. It supports EAN-13/UPC-A, UPC-E, EAN-8, Code 128, Code 93, Code 39, Codabar, Interleaved 2 of 5, QR Code and SQ Code...

9.8CVSS9.7AI score0.01787EPSS
SaveExploits0
Fedora
Fedora
added 2024/01/18 1:26 a.m.25 views

[SECURITY] Fedora 38 Update: zbar-0.23.93-1.fc38

ZBar Bar Code Reader is an open source software suite for reading bar codes from various sources, such as video streams, image files and raw intensity sensors. It supports EAN-13/UPC-A, UPC-E, EAN-8, Code 128, Code 93, Code 39, Codabar, Interleaved 2 of 5, QR Code and SQ Code...

9.8CVSS9.7AI score0.01787EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.14 views

Fedora: Security Advisory (FEDORA-2024-73d5220ed3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01787EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2024/01/18 12:00 a.m.14 views

Fedora: Security Advisory for zbar (FEDORA-2024-583e4098b9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.01787EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2024/01/15 10:31 a.m.6 views

bar-times.com Cross Site Scripting vulnerability OBB-3834913

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/01/11 9:15 a.m.5 views

CVE-2023-7048

The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.6. This is due to missing or incorrect nonce validation in mystickymenu-contact-leads.php. This makes it possible for unauthenticated attackers to trigger the export of a C...

4.3CVSS5.3AI score0.00211EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/01/11 8:32 a.m.8 views

CVE-2023-7048 My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposure

The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.6. This is due to missing or incorrect nonce validation in mystickymenu-contact-leads.php. This makes it possible for unauthenticated attackers to trigger the export of a C...

3.1CVSS6.5AI score0.00211EPSS
SaveExploits0References2
Rows per page
Query Builder