Lucene search
+L

2085 matches found

Vulnrichment
Vulnrichment
added 2023/02/15 12:00 a.m.7 views

CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

8.1CVSS6.6AI score0.00482EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/15 12:00 a.m.44 views

Dell SupportAssist for Home PCs Information Disclosure Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...

6.5CVSS6.1AI score0.00519EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/15 12:00 a.m.10 views

MediaCP Media Control Panel 安全漏洞

MediaCP Media Control Panel is an innovative audio and video network control panel for streaming media service providers from MediaCP, Inc. A security vulnerability exists in MediaCP Media Control Panel that stems from a Permissive Flash cross-domain policy that could allow information disclosure...

8.1CVSS7.3AI score0.00482EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/15 12:00 a.m.28 views

CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

8.1CVSS8.1AI score0.00482EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/15 12:00 a.m.68 views

CVE-2023-23464

CVE-2023‑23464 concerns Media CP Media Control Panel. A Permissive Flash cross‑domain policy may allow information disclosure, constituting a confidentiality risk (C/H) with no explicit exploitation status or remediation details provided in the supplied documents. Affected software/component: Med...

8.1CVSS7.5AI score0.00482EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/02/10 8:15 p.m.10 views

CVE-2022-34366

Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

6.5CVSS5.8AI score0.00519EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/10 8:15 p.m.22 views

CVE-2022-34366

Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

6.5CVSS6.4AI score0.00519EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/02/10 7:18 p.m.28 views

CVE-2022-34366

Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

6.5CVSS6.7AI score0.00519EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/10 7:18 p.m.59 views

CVE-2022-34366

Dell SupportAssist for Home PCs (versions 3.11.2 and prior) contains an Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit this to obtain sensitive information. This CVE (CVE-2022-34366) is supported by multiple repositories documenti...

6.5CVSS6.4AI score0.00519EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/10 7:18 p.m.10 views

CVE-2022-34366

Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

6.5CVSS6.9AI score0.00519EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/10 12:00 a.m.9 views

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...

6.5CVSS6.1AI score0.00519EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/01/31 1:18 p.m.11 views

jquery: Cross-site scripting via cross-domain ajax requests

jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...

6.1CVSS6.6AI score0.29726EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.12 views

jquery: Cross-site scripting via cross-domain ajax requests

jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...

6.1CVSS6.6AI score0.29726EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:15 p.m.11 views

jquery: Cross-site scripting via cross-domain ajax requests

jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...

6.1CVSS6.6AI score0.29726EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2023/01/31 1:12 p.m.12 views

jquery: Cross-site scripting via cross-domain ajax requests

jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...

6.1CVSS6.6AI score0.29726EPSS
SaveExploits2References4
OSV
OSV
added 2023/01/23 6:29 a.m.14 views

USN-5816-1 firefox vulnerabilities

Niklas Baumstark discovered that a compromised web child process of Firefox could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. An attacker could potentially exploits this to obtain sensitive information. CVE-2023-23597 Tom...

8.8CVSS7.1AI score0.00702EPSS
SaveExploits0References10
CNVD
CNVD
added 2023/01/06 12:00 a.m.79 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2023-06856)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that stems from the fact that the performance API does not properly hide whether a redirect is noted for requesting a cross-domain...

4.3CVSS6.2AI score0.00287EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/05 1:30 p.m.19 views

USN-5782-2 firefox regressions

USN-5782-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use th...

6.1AI score
SaveExploits0References2
CNVD
CNVD
added 2022/12/30 12:00 a.m.13 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2023-59952)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that stems from a Securitypolicyviolation event that could disclose cross-domain URLs, which could be exploited by an attacker to...

6.5CVSS6.2AI score0.00646EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/10 12:10 p.m.9 views

USN-5709-2 firefox vulnerabilities

USN-5709-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted...

6AI score
SaveExploits0References2
Rows per page
Query Builder