Lucene search
+L

9601 matches found

NVD
NVD
added 2019/02/19 5:29 p.m.19 views

CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

7.8CVSS7.2AI score0.00336EPSS
SaveExploits0References7
OSV
OSV
added 2019/02/19 5:29 p.m.11 views

CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

7.8CVSS8AI score
SaveExploits0References7
OSV
OSV
added 2019/02/19 5:29 p.m.5 views

DEBIAN-CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

7.8CVSS8.6AI score0.00336EPSS
SaveExploits0References1
OSV
OSV
added 2019/02/19 5:29 p.m.7 views

UBUNTU-CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

7.8CVSS7.3AI score0.00336EPSS
SaveExploits0References2
Prion
Prion
added 2019/02/19 5:29 p.m.17 views

Authorization

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

4.6CVSS7.3AI score0.00336EPSS
SaveExploits0References7Affected Software6
Debian CVE
Debian CVE
added 2019/02/19 5:0 p.m.34 views

CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

7.8CVSS7.8AI score0.00336EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/02/19 5:0 p.m.27 views

CVE-2019-5780

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

5.9AI score0.00336EPSS
SaveExploits0References7
CVE
CVE
added 2019/02/19 5:0 p.m.209 views

CVE-2019-5780

The CVE-2019-5780 entry refers to Google Chrome on macOS with insufficient restrictions on Apple Events before Chrome 72.0.3626.81, allowing a local attacker to execute JavaScript via Apple Events. Affects Chrome versions prior to the 72.0.3626.81 update. Root cause: insufficient restriction of A...

7.8CVSS5.7AI score0.00336EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2019/02/18 12:29 a.m.33 views

UBUNTU-CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

9.8CVSS7.4AI score0.01614EPSS
SaveExploits1References6
OSV
OSV
added 2019/02/18 12:29 a.m.68 views

DEBIAN-CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

9.8CVSS8.1AI score0.01614EPSS
SaveExploits1References1
Circl
Circl
added 2019/02/13 2:35 p.m.13 views

CVE-2019-0604

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:52+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402 2019-03-23 18:43:00+00:00| published-proof-of-concept| https://t.me/antichat/4119 2019-03-23 19:42:30+00:00| seen| https://t.me/canyoupwnme/5306 2019-03-24 15:21:55+00:00| seen|...

9.8CVSS7.2AI score0.99825EPSS
SaveExploits30References38
RedHat Linux
RedHat Linux
added 2019/02/12 2:46 a.m.8 views

chromium-browser: Insufficient policy enforcement

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events...

7.8CVSS7.4AI score0.00336EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.10 views

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

6.1CVSS6.7AI score0.01563EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.8 views

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

6.1CVSS6.7AI score0.01563EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.8 views

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

6.1CVSS6.7AI score0.01563EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.11 views

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

6.1CVSS6.7AI score0.01563EPSS
SaveExploits0References2Affected Software1
Akamai Blog
Akamai Blog
added 2019/02/07 7:19 p.m.113 views

Qualifying Encoders with Akamai

Introduction The encoder qualification program was created to improve the process for vendors that wish to align themselves with Akamai network specific requirements. It is also intended to , mitigate the risk of encoder issues before using in production. A formal process is being introduced to...

0.4AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2019/02/04 7:29 p.m.20 views

CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS6.8AI score0.00683EPSS
SaveExploits1References2
OSV
OSV
added 2019/02/04 7:29 p.m.6 views

DEBIAN-CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS6.5AI score0.00683EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2019/02/04 7:0 p.m.49 views

CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS1.3AI score0.00683EPSS
SaveExploits1
Rows per page
Query Builder