Lucene search
+L

6506 matches found

Github Security Blog
Github Security Blog
added 2021/04/30 5:27 p.m.59 views

LinkedIn Oncall vulnerable to Cross-Site Scripting

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar...

6.1CVSS5.9AI score0.03203EPSS
SaveExploits1References6Affected Software1
Citrix
Citrix
added 2021/04/01 12:00 a.m.12 views

iOS SecureMail shows Error in notification bar "Secure Mail unable to fetch this message due to mail server error, Please contact your administrator."

Error message pops up on notification bar/screen when a new email comes butfor user are able to receive the mail in client. Error Message "Secure Mail unable to fetch this message due to mail server error, Please contact your administrator."...

7AI score
SaveExploits0
OSV
OSV
added 2021/03/31 2:15 p.m.5 views

DEBIAN-CVE-2021-23984

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This...

6.5CVSS8.3AI score0.01113EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/31 2:15 p.m.20 views

Design/Logic Flaw

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This...

4.3CVSS6.3AI score0.01113EPSS
SaveExploits0References4Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/03/31 2:15 p.m.6 views

CVE-2021-23984

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This...

6.5CVSS6.9AI score0.01113EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/03/26 12:00 a.m.40 views

Oracle Linux 7 : thunderbird (ELSA-2021-0996)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0996 advisory. 78.9.0-3.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.9.0-3 - Update to 78.9.0 build2, updated...

8.8CVSS7.8AI score0.01404EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2021/03/26 12:00 a.m.32 views

Oracle Linux 8 : firefox (ELSA-2021-0990)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0990 advisory. 78.9.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.9.0-1 - Update to 78.9.0...

8.8CVSS7.8AI score0.01404EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 1:47 p.m.10 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 1:41 p.m.7 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 1:01 p.m.8 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:56 p.m.8 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:53 p.m.8 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:39 p.m.7 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:33 p.m.10 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/03/25 12:24 p.m.7 views

Mozilla: Malicious extensions could have spoofed popup information

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS7.3AI score0.01113EPSS
SaveExploits0References5
Veracode
Veracode
added 2021/03/25 1:22 a.m.30 views

Information Disclosure Via Spoofable Website

firefox is vulnerable to information disclosure via spoofable website .A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a...

6.5CVSS1.5AI score0.01113EPSS
SaveExploits0References7Affected Software9
RedhatCVE
RedhatCVE
added 2021/03/25 1:00 a.m.29 views

CVE-2021-23984

The Mozilla Foundation Security Advisory describes this issue as: A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website...

6.5CVSS2.7AI score0.01113EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/03/25 12:00 a.m.34 views

CVE-2021-23984

A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This...

6.5CVSS6.8AI score0.01113EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2021/03/23 12:00 a.m.39 views

Mozilla Firefox ESR < 78.9

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 78.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-11 advisory. - Mozilla developers and community members Alexis Beingessner, Tyson Smith, Julien Wajsberg, and Matthew...

9.8CVSS8.4AI score0.01522EPSS
SaveExploits1References8
OSV
OSV
added 2021/03/09 6:15 p.m.5 views

CVE-2021-21178

Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS7.8AI score
SaveExploits0References7
Rows per page
Query Builder