Lucene search
+L

930 matches found

CNNVD
CNNVD
•added 2022/04/15 12:00 a.m.•20 views

F-Secure SAFE安全漏洞

F-secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-secure. A security vulnerability exists in F-Secure SAFE, which originates from the fact that displaying an old URL may lead to address bar spoofing if navigation to a new URL fails. Address bar spoofing can be use...

4.3CVSS5.2AI score0.00462EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/25 11:15 a.m.•10 views

CVE-2021-44751

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In mos...

5.3CVSS6.1AI score0.00575EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2022/03/25 11:15 a.m.•33 views

CVE-2021-44751

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In mos...

5.3CVSS0.00575EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/25 11:15 a.m.•46 views

Design/Logic Flaw

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In mos...

5CVSS5.3AI score0.00575EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/25 10:32 a.m.•45 views

CVE-2021-44751 F-Secure SAFE Browser vulnerable to USSD attacks

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In mos...

4.3CVSS5.5AI score0.00575EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/25 10:32 a.m.•122 views

CVE-2021-44751

The CVE describes a vulnerability in the F-Secure SAFE browser where a malicious website containing USSD code via JavaScript or an iframe can trigger the browser’s dialer. This could allow an attacker to send USSD messages or initiate calls. The impact notes that on most modern Androids the diale...

5.3CVSS4.8AI score0.00575EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/25 12:00 a.m.•1 views

PT-2022-12222

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser versions prior to March 22, 2022 Description A maliciously crafted website with USSD code in JavaScript or iFrame can trigger the dialer application from the F-Secure browser, potentially allowing an attacker to send...

5.3CVSS5.6AI score0.00575EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•6 views

CVE-2021-44751: Incorrect Default Permissions

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In mos...

5.3CVSS5.9AI score0.00575EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/25 12:00 a.m.•15 views

F-secure F-Secure SAFE 安全漏洞

F-secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure. A security vulnerability exists in the F-Secure SAFE browser, which originates from a maliciously crafted website with USSD code in JavaScript or an iFrame that can trigger a dial-up application fr...

5.3CVSS5.9AI score0.00575EPSS
SaveExploits0References2
NCSC
NCSC
•added 2022/03/11 12:00 a.m.•16 views

Vulnerability fixed in F-Secure products

A vulnerability has been fixed in the F-Secure Support tool, which is is used in Business Suite and consumer products. A authenticated malicious person could potentially exploit it to execute arbitrary code under higher privileges. F-Secure has made available an update that fixes the described...

8.5CVSS7.7AI score0.00742EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/03/10 5:44 p.m.•13 views

CVE-2021-44750

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

8.5CVSS7.7AI score0.00742EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/10 5:44 p.m.•25 views

Remote code execution

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

8.5CVSS7.5AI score0.00742EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•19 views

F-Secure 多款产品安全漏洞

F-Secure Elements Agent and others are products of F-Secure Finland.F-Secure Elements Agent is a cloud-native endpoint protection system.F-Secure MDR is a managed network security service.F-Secure Client Security is a client security F-Secure Client Security is a client-side security solution. A...

8.5CVSS7.4AI score0.00742EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/03/09 11:38 a.m.•46 views

CVE-2021-44750 Arbitrary Code Execution

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

6.4CVSS7.7AI score0.00742EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/09 11:38 a.m.•85 views

CVE-2021-44750

CVE-2021-44750 affects F-Secure products and concerns an arbitrary code execution via the F-Secure Support Tool. The issue allows a standard user to craft a special configuration file which, when executed by an administrator, can run arbitrary commands. Affected components include the F-Secure Su...

8.5CVSS7.1AI score0.00742EPSS
SaveExploits0References2Affected Software5
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•2 views

PT-2022-12221

Name of the Vulnerable Software and Affected Versions F-Secure Support Tool affected versions not specified Description An arbitrary code execution issue was found in the F-Secure Support Tool. A standard user can create a special configuration file that, when executed by an administrator, can ru...

8.5CVSS0.00742EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•4 views

CVE-2021-44750: Undefined Security Weakness

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

8.5CVSS7.7AI score0.00742EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/08 12:00 a.m.•24 views

F-Secure SAFE Browser for Android Cross-Site Scripting Vulnerability (CNVD-2022-23492)

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to a cross-site scripting vulnerability that can be exploited by attackers to cause arbitrary code execution...

9.6CVSS5.4AI score0.00817EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/08 12:00 a.m.•27 views

F-Secure SAFE Browser for Android跨站脚本漏洞

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to cross-site scripting, which can be exploited by attackers to remotely execute JavaScript and trigger generic cross-site scripting through the brows...

6.1CVSS5.4AI score0.00546EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/06 8:15 p.m.•14 views

CVE-2021-44748

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

6.1CVSS5.8AI score0.00546EPSS
SaveExploits0References1
Rows per page
Query Builder