Lucene search
+L

237 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2025-24535

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00239EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2013-1833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x befo...

3.5CVSS6.2AI score0.01457EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-1042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moodle 3.x has Server Side Request Forgery in the filepicker. CVE-2018-1042 Note that Nessus relies on the presence of the package as reported by the vendor...

6.5CVSS6.4AI score0.15572EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-25978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality. CVE-2024-25978 Note that Nessus relies on the...

7.5CVSS7.1AI score0.00944EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-8881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI...

6.5CVSS6.7AI score0.00239EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/29 12:0 a.m.6 views

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2025:03009-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03009-1 advisory. - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the...

9.8CVSS6.9AI score0.00563EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
added 2025/08/28 9:19 a.m.3 views

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-9180 bmo1979782: Same-origin policy bypass in the Graphics:...

8.8CVSS8AI score0.00563EPSS
SaveExploits0References22
OSV
OSV
added 2025/08/28 9:19 a.m.2 views

SUSE-SU-2025:03009-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-9180 bmo1979782: Same-origin policy bypass in the Graphics:...

9.8CVSS7.3AI score0.00563EPSS
SaveExploits0References12
OSV
OSV
added 2025/08/28 9:18 a.m.2 views

SUSE-SU-2025:03008-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 bsc1248162 CVE-2025-9179 bmo1979527: Sandbox escape due to invalid pointer in the Audio/Video: GMP component CVE-2025-9180 bmo1979782: Same-origin policy bypass in the Graphics:...

9.8CVSS7.3AI score0.00563EPSS
SaveExploits0References12
Microsoft CVE
Microsoft CVE
added 2025/08/15 7:0 a.m.5 views

Chromium: CVE-2025-8881 Inappropriate implementation in File Picker

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS6.5AI score0.00239EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2025/08/15 12:0 a.m.4 views

KLA86735 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Aura can be exploited to cause denial of service or execu...

8.8CVSS9.1AI score0.00301EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Microsoft Edge (Chromium) < 139.0.3405.102 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.102. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to...

8.8CVSS8.1AI score0.00301EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.5 views

Microsoft Edge (Chromium) < 138.0.3351.140 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.140. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to...

8.8CVSS8.1AI score0.00301EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2025/08/14 2:55 a.m.5 views

SUSE CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.5AI score0.00239EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/13 3:15 a.m.5 views

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00239EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/13 3:15 a.m.6 views

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.2AI score
SaveExploits0References2
OSV
OSV
added 2025/08/13 3:15 a.m.5 views

DEBIAN-CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/13 2:43 a.m.2 views

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.2AI score0.00239EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/08/13 2:43 a.m.7 views

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.00239EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/08/13 2:43 a.m.7 views

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.4AI score0.00239EPSS
SaveExploits0
Rows per page
Query Builder