Lucene search
+L

4019 matches found

OSV
OSV
added 2021/02/26 3:15 a.m.6 views

CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.3CVSS6.9AI score0.00874EPSS
SaveExploits0References3
Prion
Prion
added 2021/02/26 3:15 a.m.27 views

Code injection

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

2.6CVSS4.5AI score0.00874EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/02/26 3:15 a.m.32 views

CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.3CVSS6.8AI score0.00874EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/02/26 3:15 a.m.3 views

CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.3CVSS6.8AI score0.00874EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/02/26 3:15 a.m.13 views

UBUNTU-CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.3CVSS7.3AI score0.00874EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/02/26 2:13 a.m.32 views

CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.8AI score0.00874EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2021/02/26 2:13 a.m.78 views

CVE-2021-23977

Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...

5.3CVSS5.7AI score0.00874EPSS
SaveExploits0
Prion
Prion
added 2021/02/24 12:15 p.m.28 views

Directory traversal

Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors...

5.5CVSS8.2AI score0.02386EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:0 a.m.41 views

Avast Premium Security AvastSvc Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS4.1AI score0.00261EPSS
SaveExploits0
NVD
NVD
added 2021/02/23 12:15 a.m.34 views

CVE-2021-23827

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media such as private pictures in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodolog...

5.5CVSS0.00296EPSS
SaveExploits1References3
OSV
OSV
added 2021/02/23 12:15 a.m.26 views

CVE-2021-23827

Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media such as private pictures in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodolog...

5.5CVSS6.6AI score0.00296EPSS
SaveExploits1References3
OwnCloud
OwnCloud
added 2021/02/23 12:0 a.m.34 views

DLL injection in the ownCloud Desktop Client - ownCloud

The released desktop client was loading development plugins from certain directories when they were present...

5.3CVSS2.3AI score0.00773EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2021/02/20 11:30 a.m.318 views

DirDar - A Tool That Searches For (403-Forbidden) Directories To Break It And Get Dir Listing On It

bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have Go installed and configured...

7.2AI score
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/17 12:0 a.m.11 views

Path Traversal Vulnerability in Changjia Financial Management System

A path traversal vulnerability exists in Changer Financial Management System that originates when a network system or product fails to properly filter for special elements in the path of a resource or file. An attacker could use this vulnerability to access locations outside of a restricted...

7.5CVSS7.1AI score0.01776EPSS
SaveExploits0References3
NVD
NVD
added 2021/02/08 11:15 p.m.67 views

CVE-2021-26917

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported awa...

5.5CVSS0.0055EPSS
SaveExploits1References4
OSV
OSV
added 2021/02/08 11:15 p.m.9 views

CVE-2021-26917

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported awa...

5.5CVSS6.5AI score
SaveExploits0References4
Prion
Prion
added 2021/02/08 11:15 p.m.17 views

Code injection

DISPUTED PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually...

2.1CVSS5.3AI score0.0055EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2021/02/08 10:22 p.m.35 views

CVE-2021-26917

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported awa...

5.6AI score0.0055EPSS
SaveExploits1References4
CVE
CVE
added 2021/02/08 10:22 p.m.60 views

CVE-2021-26917

PyBitmessage (versions up to 0.6.3.2) is affected by CVE-2021-26917. A crafted apinotifypath value can cause the application to write screen captures to potentially unwanted directories on the local host. The public descriptions note that there is no evidence these screen intercepts are transport...

5.5CVSS5.3AI score0.0055EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2021/02/08 12:0 a.m.12 views

PyBitmessage Security Vulnerability

PyBitmessage is an open source P2P communication protocol. It is used to send encrypted messages to other people or many subscribers. A security vulnerability exists in PyBitmessage version 0.6.3.2, which stems from a vulnerability that allows an attacker to write screenshots to potentially...

5.5CVSS6AI score0.0055EPSS
SaveExploits1References5
Rows per page
Query Builder