Lucene search
+L

3089 matches found

Vulnrichment
Vulnrichment
•added 2024/05/14 5:21 p.m.•25 views

CVE-2024-4776

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

6.1AI score0.00417EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/14 5:21 p.m.•46 views

CVE-2024-4776

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

6AI score0.00417EPSS
SaveExploits1References2
CVE
CVE
•added 2024/05/14 5:21 p.m.•175 views

CVE-2024-4776

This vulnerability affects Firefox versions earlier than 126 (including firefox-esr ). A file dialog displayed while in full-screen mode could potentially cause the window to remain disabled , impacting the user interface. While technical details regarding the specific root cause are not provided...

8.2CVSS5.7AI score0.00417EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2024/05/14 5:21 p.m.•58 views

CVE-2024-4776

A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox 126...

8.2CVSS9.2AI score0.00417EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•26 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions due to a window being disabled even after the file dialog box is displayed...

8.2CVSS8.6AI score0.00417EPSS
SaveExploits1References4
Vivaldi Security Advisories
Vivaldi Security Advisories
•added 2024/05/13 9:13 p.m.•36 views

Minor update (5) for Vivaldi Desktop Browser 6.7

Download Vivaldi The following improvements were made since the fourth 6.7 minor update: Chromium Upgraded 124.0.6367.219 CVE-2024-4761: NB. Chromium updates may include security enhancements or fixes, crash fixes, or website compatibility updates. Web Compatibility Auth does not work when link i...

8.8CVSS5.8AI score0.11007EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2024/05/13 12:00 a.m.•9 views

PT-2024-22078 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.2 macOS Sonoma versions prior to 14.5 Safari versions prior to 17.5 Description: The issue allows a website's permission dialog to persist after navigation away from the site. This was addressed with improved...

9.1CVSS7.9AI score0.00556EPSS
SaveExploits0References14
NVD
NVD
•added 2024/05/02 3:15 p.m.•54 views

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

9.6CVSS8.7AI score0.02236EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/02 3:15 p.m.•17 views

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

9.6CVSS6.2AI score0.02236EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/02 3:02 p.m.•108 views

CVE-2024-4406

This CVE affects Xiaomi Pro 13 smartphones (GetApps) via the integral-dialog-page.html flaw. The root cause is improper sanitization when parsing the integralInfo parameter, enabling arbitrary script injection that can lead to remote code execution in the context of the current user. Exploitation...

9.6CVSS8.5AI score0.02236EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/02 3:02 p.m.•31 views

CVE-2024-4406 Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

8.8CVSS7.2AI score0.02236EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/02 3:02 p.m.•69 views

CVE-2024-4406 Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

8.8CVSS8.8AI score0.02236EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/02 12:00 a.m.•20 views

Xiaomi Pro 13 安全漏洞

Xiaomi Pro 13 is a smartphone from Chinese company Xiaomi Xiaomi. The Xiaomi Pro 13 suffers from a security vulnerability that originates from a specific flaw in the integral-dialog-page.html file, which allows remote attackers to execute arbitrary code...

9.6CVSS9AI score0.02236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•6 views

CVE-2024-4406: Improper Neutralization of Input During Web Page Generation

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

9.6CVSS6.7AI score0.02236EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/01 12:00 a.m.•52 views

(Pwn2Own) Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS7.4AI score0.02236EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/05/01 12:00 a.m.•19 views

PT-2024-30927 · Xiaomi · Xiaomi Pro 13

Name of the Vulnerable Software and Affected Versions: Xiaomi Pro 13 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this issue, where the targ...

9.6CVSS9.2AI score0.02236EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•6 views

PT-2024-27911

Name of the Vulnerable Software and Affected Versions Quick Share versions prior to 1.0.1724.0 Description The issue allows an attacker to bypass the accept file dialog on Quick Share Windows. Normally, the Quick Share Windows app requires user acceptance from the receiving device to send a file...

7.1CVSS5.8AI score0.00212EPSS
SaveExploits0References14
Openbugbounty
Openbugbounty
•added 2024/04/11 3:53 p.m.•13 views

dialog-projekte.de Cross Site Scripting vulnerability OBB-3916922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•11 views

CVE-2023-50821: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC04, SIMATIC WinCC Runtime Professional V17 All versions V17 Update 8, SIMATIC WinCC Runtime Professional V18 All versions V18 Update 4, SIMATIC WinCC Runtime Professional V19 All versions V19 Update 1, SIMATIC WinCC...

6.9CVSS5.6AI score0.00182EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•8 views

PT-2024-4512

Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions prior to V9.1 SP2 UC04 SIMATIC WinCC Runtime Professional versions prior to V17 Update 8 SIMATIC WinCC Runtime Professional versions prior to V18 Update 4 SIMATIC WinCC Runtime Professional versions prior to V19 Update 1...

6.9CVSS6AI score0.00182EPSS
SaveExploits0References3
Rows per page
Query Builder