Lucene search
+L

21043 matches found

BDU FSTEC
BDU FSTEC
added 2024/10/30 12:00 a.m.14 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

5CVSS5.5AI score0.00457EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/10/29 1:15 p.m.37 views

CVE-2024-41153

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...

7.2CVSS0.01606EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/29 1:15 p.m.11 views

CVE-2024-41153

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...

7.2CVSS6AI score0.01606EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 12:30 p.m.45 views

CVE-2024-41153

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...

7.2CVSS0.01606EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 12:30 p.m.26 views

CVE-2024-41153

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...

7.2CVSS8.1AI score0.01606EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 12:30 p.m.71 views

CVE-2024-41153

CVE-2024-41153 : Command injection vulnerability in the Edge Computing UI of Hitachi Energy TRO600 series radios. The issue allows an attacker with write access to the web UI to execute arbitrary system commands on the device with root privileges, giving attacker control beyond the write privileg...

7.2CVSS7.9AI score0.01606EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.15 views

PT-2024-29297 · Unknown · Tro600 Series Radios

Name of the Vulnerable Software and Affected Versions: TRO600 series radios affected versions not specified Description: A command injection issue in the Edge Computing UI allows an attacker with write access to the web UI to execute arbitrary system commands on the device with root privileges...

7.2CVSS8.3AI score0.01606EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.11 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

10CVSS7.4AI score0.00638EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.13 views

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.7AI score0.00674EPSS
SaveExploits0References10Affected Software5
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.12 views

Hitachi Energy TRO600 安全漏洞

The Hitachi Energy TRO600 is a series of routers from Hitachi, Ltd. of Japan Hitachi. It enables a hybrid wireless communications architecture that is scalable, flexible and secure. A security vulnerability exists in Hitachi Energy TRO600 versions 9.1.0.0 through 9.2.0.0, which stems from a comma...

7.2CVSS7.6AI score0.01606EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.13 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

10CVSS7.4AI score0.00494EPSS
SaveExploits0References13Affected Software6
OpenVAS
OpenVAS
added 2024/10/29 12:00 a.m.17 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Oct-4 2024)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.7AI score0.00638EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.15 views

The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

9.4CVSS7.3AI score0.00504EPSS
SaveExploits0References13Affected Software6
RedhatCVE
RedhatCVE
added 2024/10/28 3:25 p.m.27 views

CVE-2024-45802

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content. Mitigation This bug was mitigated by the default upstream build configuration of Squid since version 6....

7.5CVSS6.6AI score0.47893EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2024/10/25 5:17 p.m.14 views

rpm-ostree bug fix update

An update is available for rpm-ostree. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rpm-ostree tool binds together the RPM packaging model with the OSTree...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/10/25 1:15 p.m.20 views

CVE-2024-49378

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS0.00321EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/25 12:55 p.m.10 views

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS6.9AI score0.00321EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/10/25 12:55 p.m.39 views

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS0.00321EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/25 12:55 p.m.29 views

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS7AI score0.00321EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/25 12:55 p.m.69 views

CVE-2024-49378

CVE-2024-49378 affects the smartUp browser extension for Edge and Firefox versions 7.2.622.1170. The root cause is a universal cross-site scripting flaw that lets another extension execute arbitrary code in the context of the user’s tab. The impact is arbitrary code execution within the tab; expl...

6.5CVSS6.2AI score0.00321EPSS
SaveExploits0References2
Rows per page
Query Builder