Lucene search
+L

1734 matches found

NVD
NVD
added 2023/10/25 6:17 p.m.36 views

CVE-2023-46126

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

5.4CVSS4.7AI score0.00607EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/25 6:17 p.m.17 views

Design/Logic Flaw

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

4.9CVSS5.5AI score0.00607EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/24 9:59 p.m.12 views

CVE-2023-46126 Fides JavaScript Injection Vulnerability in Privacy Center URL

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

3.9CVSS6.7AI score0.00607EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/10/24 9:59 p.m.34 views

CVE-2023-46126 Fides JavaScript Injection Vulnerability in Privacy Center URL

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

3.9CVSS5.7AI score0.00607EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/24 9:59 p.m.36 views

CVE-2023-46126 Fides JavaScript Injection Vulnerability in Privacy Center URL

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

3.9CVSS5.3AI score0.00607EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2023/10/24 2:45 a.m.30 views

Fides JavaScript Injection Vulnerability in Privacy Center URL

Impact The Fides web application allows users to edit consent and privacy notices such as cookie banners. These privacy notices can then be served by other integrated websites, for example in cookie consent banners. One of the editable fields is a privacy policy URL and this input was found to no...

5.4CVSS6.8AI score0.00607EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/02 8:24 a.m.10 views

CVE-2023-41800 WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...

5.9CVSS5.6AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/02 8:24 a.m.25 views

CVE-2023-41800 WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...

5.9CVSS5.6AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.3 views

CVE-2023-40541

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...

5.5CVSS5.8AI score
SaveExploits0References3
NVD
NVD
added 2023/09/27 3:19 p.m.16 views

CVE-2023-40541

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...

5.5CVSS5AI score0.00292EPSS
SaveExploits0References3
Prion
Prion
added 2023/09/27 3:19 p.m.27 views

Design/Logic Flaw

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...

1.7CVSS5.9AI score0.00292EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/26 8:14 p.m.11 views

CVE-2023-40541

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...

6.2AI score0.00292EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/26 8:14 p.m.81 views

CVE-2023-40541

CVE-2023-40541 concerns macOS Shortcuts where a shortcut could output sensitive user data without consent. The vulnerability is fixed in macOS Sonoma 14, addressed by adding an additional user-consent prompt. Connected sources consistently describe the issue as a permissions/consent gap rather th...

5.5CVSS5.8AI score0.00292EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/09/26 8:14 p.m.22 views

CVE-2023-40541

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...

7AI score0.00292EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/26 12:0 a.m.8 views

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from a shortcut that may export sensitive user data without consent...

5.5CVSS6.5AI score0.00292EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.8 views

PT-2023-27503 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent. Recommendations: For versions prior to 14,...

5.5CVSS5.1AI score0.00292EPSS
SaveExploits0References8
NVD
NVD
added 2023/09/25 1:15 a.m.23 views

CVE-2023-41948

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...

5.9CVSS5.4AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/25 1:15 a.m.5 views

CVE-2023-41948

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...

4.8CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/09/25 12:36 a.m.18 views

CVE-2023-41948 WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...

5.9CVSS5.6AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/25 12:36 a.m.35 views

CVE-2023-41948

CVE-2023-41948 refers to a Stored XSS vulnerability in the WordPress plugin Cookie Notice & Consent, affecting versions

5.9CVSS5.1AI score0.00316EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder