Lucene search
+L

6762 matches found

Cvelist
Cvelist
•added 2019/04/29 2:30 p.m.•41 views

CVE-2019-11593

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.3AI score0.02491EPSS
SaveExploits0References5
CVE
CVE
•added 2019/04/29 2:30 p.m.•59 views

CVE-2019-11593

CVE-2019-11593 affects Adblock Plus prior to 3.5.2. The vulnerability arises from the $rewrite filter option , which can let filter-list maintainers execute arbitrary code in a client-side session when a service loads a script via XMLHttpRequest or Fetch if the script origin has an open redirect....

8.1CVSS8.2AI score0.02491EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/29 12:00 a.m.•8 views

CVE-2019-11593: Improper Control of Generation of Code

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.1CVSS6.1AI score0.02491EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/29 12:00 a.m.•9 views

CVE-2019-11595: Improper Input Validation

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

9CVSS6.1AI score0.02407EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/04/29 12:00 a.m.•4 views

PT-2019-12404

Name of the Vulnerable Software and Affected Versions AdBlock versions prior to 3.45.0 Description The issue allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an op...

8.1CVSS0.02389EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2019/04/29 12:00 a.m.•6 views

PT-2019-12405

Name of the Vulnerable Software and Affected Versions uBlock versions prior to 0.9.5.15 Description The issue allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an...

9CVSS0.02407EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2019/04/29 12:00 a.m.•6 views

PT-2019-12403

Name of the Vulnerable Software and Affected Versions Adblock Plus versions prior to 3.5.2 Description The issue allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has a...

8.1CVSS0.02491EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/29 12:00 a.m.•7 views

CVE-2019-11594: Improper Control of Generation of Code

In AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.1CVSS6.1AI score0.02389EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/04/25 12:00 a.m.•28 views

Ansible fetch module Path Traversal

The vulnerability of the fetch module in the Ansible configuration system is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a local attacker to gain unauthorized access to information and compromise its integrity by copying a...

4.2CVSS5.8AI score0.00526EPSS
SaveExploits0References10Affected Software6
osv_ghsa
osv_ghsa
•added 2019/04/15 4:19 p.m.•48 views

GHSA-74VQ-H4Q8-X6JV Ansible Path Traversal vulnerability

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS5.3AI score0.00526EPSS
SaveExploits0References16
osv-alpine
osv-alpine
•added 2019/03/27 1:29 p.m.•14 views

ALPINE-CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.7AI score0.00526EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2019/03/27 1:29 p.m.•13 views

DEBIAN-CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.2AI score0.00526EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/03/27 1:29 p.m.•45 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.6AI score
SaveExploits0References9
NVD
NVD
•added 2019/03/27 1:29 p.m.•27 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS5AI score0.00526EPSS
SaveExploits0References9
Prion
Prion
•added 2019/03/27 1:29 p.m.•38 views

Path traversal

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

3.3CVSS4.2AI score0.00526EPSS
SaveExploits0References9Affected Software1
osv-ubuntu
osv-ubuntu
•added 2019/03/27 1:29 p.m.•14 views

UBUNTU-CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

10CVSS6.7AI score0.00526EPSS
SaveExploits0References4
osv_pysec
osv_pysec
•added 2019/03/27 1:29 p.m.•43 views

PYSEC-2019-5

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS4.3AI score0.00526EPSS
SaveExploits0References9
osv_pysec
osv_pysec
•added 2019/03/27 1:29 p.m.•25 views

PYSEC-2019-75

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

6.6AI score
SaveExploits0References8
PyPA
PyPA
•added 2019/03/27 1:29 p.m.•18 views

PYSEC-2019-5

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.7AI score0.00526EPSS
SaveExploits0References9Affected Software1
UbuntuCve
UbuntuCve
•added 2019/03/27 1:29 p.m.•39 views

CVE-2019-3828

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path...

4.2CVSS6.8AI score0.00526EPSS
SaveExploits0References3
Rows per page
Query Builder