Lucene search
K

3797 matches found

OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.14 views

Mozilla Firefox ESR Security Advisories (MFSA2023-26, MFSA2023-30) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

9.8CVSS7.7AI score0.13694EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.14 views

Mozilla Thunderbird Security Advisories (MFSA2023-29, MFSA2023-32) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

9.8CVSS7.7AI score0.13694EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.19 views

Mozilla Firefox ESR Security Advisories (MFSA2023-26, MFSA2023-30) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

9.8CVSS7.7AI score0.13694EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.17 views

Mozilla Thunderbird Security Advisories (MFSA2023-29, MFSA2023-32) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

9.8CVSS7.7AI score0.13694EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.18 views

Mozilla Firefox ESR Security Advisories (MFSA2023-26, MFSA2023-31) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

9.8CVSS7.6AI score0.13694EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/08/03 12:0 a.m.24 views

RHEL 7 : firefox (RHSA-2023:4461)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4461 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.8CVSS8.1AI score0.13694EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2023/08/03 12:0 a.m.29 views

RHEL 9 : firefox (RHSA-2023:4462)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4462 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

9.8CVSS8.1AI score0.13694EPSS
Exploits1References20
OpenVAS
OpenVAS
added 2023/08/03 12:0 a.m.24 views

Mozilla Firefox Security Advisories (MFSA2023-26, MFSA2023-31) - Windows

Mozilla Firefox is prone to multiple use-after-free vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS7.8AI score0.13694EPSS
Exploits1References1
OSV
OSV
added 2023/08/02 10:44 a.m.7 views

SUSE-SU-2023:3163-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues: Firefox was updated to Extended Support Release 115.1.0 ESR bsc1213746. - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas bmo1833876. - CVE-2023-4046: Fixed incorrect value used during WASM compilation...

9.8CVSS8.8AI score0.13694EPSS
Exploits1References14
OSV
OSV
added 2023/08/02 10:42 a.m.5 views

SUSE-SU-2023:3162-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues: Firefox was updated to Extended Support Release 115.1.0 ESR bsc1213746: - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas bmo1833876. - CVE-2023-4046: Fixed incorrect value used during WASM compilation...

9.8CVSS8.8AI score0.13694EPSS
Exploits1References14
OSV
OSV
added 2023/08/02 10:39 a.m.7 views

SUSE-SU-2023:3161-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues: Firefox was updated to Extended Support Release 115.1.0 ESR bsc1213746. - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas bmo1833876. - CVE-2023-4046: Fixed incorrect value used during WASM compilation...

9.8CVSS8.8AI score0.13694EPSS
Exploits1References14
IBM Security Bulletins
IBM Security Bulletins
added 2023/08/01 5:14 p.m.35 views

Security Bulletin: IBM TRIRIGA Application Platform suseptable to clickjacking (CBE-2017-4015)

Summary TRIRIGA could allow a remote authenticated attacker to hijack the clicking action of the victim, caused by improper validation of user supplied HTTP response header Vulnerability Details CVEID:CVE-2017-4015 DESCRIPTION: McAfee Network Data Loss Prevention could allow a remote authenticate...

4.5CVSS4.5AI score0.01067EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2023/08/01 12:0 a.m.2 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox ESR is Firefox Enterprise Edition. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR, which can be exploited by attackers to trick users into granting privileges using...

8.8CVSS8.6AI score0.00582EPSS
Exploits1References15
OSV
OSV
added 2023/06/22 10:15 p.m.2 views

CVE-2023-23343

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

6.1CVSS5.8AI score0.00278EPSS
Exploits0References1
NVD
NVD
added 2023/06/22 10:15 p.m.19 views

CVE-2023-23343

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

6.1CVSS4.4AI score0.00278EPSS
Exploits0References1
Prion
Prion
added 2023/06/22 10:15 p.m.15 views

Design/Logic Flaw

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

5.8CVSS6.2AI score0.00278EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/22 9:57 p.m.18 views

CVE-2023-23343 HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

2.4CVSS6.4AI score0.00278EPSS
Exploits0References1
CVE
CVE
added 2023/06/22 9:57 p.m.42 views

CVE-2023-23343

CVE-2023-23343 describes a clickjacking flaw in HCL BigFix OSD Bare Metal Server, affected versions up to 311.12. Adversaries can stack transparent/opaque layers to trick users into clicking a link/button that redirects to an attacker-controlled domain. Documented impact is redirect-based clickja...

6.1CVSS4.4AI score0.00278EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/22 9:57 p.m.13 views

CVE-2023-23343 HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain...

2.4CVSS6.8AI score0.00278EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/22 12:0 a.m.5 views

PT-2023-18916 · Hcl · Hcl Bigfix Osd Bare Metal Server

Name of the Vulnerable Software and Affected Versions: HCL BigFix OSD Bare Metal Server versions 311.12 and earlier Description: A clickjacking issue allows an attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page, resulting in a redirect t...

6.1CVSS6.2AI score0.00278EPSS
Exploits0References3
Rows per page
Query Builder