Lucene search
+L

7511 matches found

RedHat Linux
RedHat Linux
added 2022/04/11 2:55 p.m.9 views

Mozilla: iframe contents could be rendered outside the border

The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...

5.4CVSS7.3AI score0.00561EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/04/11 2:18 p.m.7 views

Mozilla: iframe contents could be rendered outside the border

The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...

5.4CVSS7.3AI score0.00561EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/04/08 2:41 p.m.6 views

Mozilla: iframe contents could be rendered outside the border

The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...

5.4CVSS7.3AI score0.00561EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.12 views

The vulnerability of the `filter_frame` function in the `libavfilter/vf_lenscorrection.c` component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the filterframe function in the libavfilter/vflenscorrection.c file of the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...

9.3CVSS7AI score0.01136EPSS
SaveExploits1References9Affected Software3
Snyk
Snyk
added 2022/03/27 11:25 a.m.3 views

Denial of Service (DoS)

Overview grpc/grpc-swift is a Swift language implementation of gRPC. Affected versions of this package are vulnerable to Denial of Service DoS via reachable assertion, due to an incorrect logic when handling GOAWAY frames. Details Denial of Service DoS describes a family of attacks, all aimed at...

7.5CVSS7AI score0.01159EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.9 views

grpc 安全漏洞

grpc is a Cloud Native Computing Foundation codebase for rpc connectivity applications. A security vulnerability exists in grpc-swift versions prior to 1.7.2, which stems from incorrect logic when handling GOAWAY frames...

7.5CVSS7.2AI score0.01159EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/03/22 3:33 p.m.7 views

netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way

A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...

7.5CVSS7.3AI score0.06745EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2022/03/19 7:0 a.m.13 views

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.

...

5.5CVSS7.1AI score0.00346EPSS
SaveExploits0
CNVD
CNVD
added 2022/03/15 12:0 a.m.79 views

Linux Kernel VirtIO Bluetooth driver denial of service vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A denial of service vulnerability exists in the Linux Kernel VirtIO Bluetooth driver, which is caused by a memory leak in the VirtIO Bluetooth driver memory leak in driver/Bluetooth/VirtIObt.c. A local...

5.5CVSS3.4AI score0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/14 9:55 p.m.71 views

GHSA-4JP3-Q2QM-9FMW Improper Restriction of Rendered UI Layers or Frames in Sylius

Impact It is possible for a page controlled by an attacker to load the website within an iframe. This will enable a clickjacking attack, in which the attacker's page overlays the target application's interface with a different interface provided by the attacker Patches The issue is fixed in...

6.1CVSS5.9AI score0.00907EPSS
SaveExploits0References6
NVD
NVD
added 2022/03/14 7:15 p.m.30 views

CVE-2022-24733

Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, it is possible for a page controlled by an attacker to load the website within an iframe. This will enable a clickjacking attack, in which the attacker's page overlays the target application's interface wi...

6.1CVSS0.00907EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/03/14 6:50 p.m.8 views

CVE-2022-24733 Improper Restriction of Rendered UI Layers or Frames in Sylius

Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, it is possible for a page controlled by an attacker to load the website within an iframe. This will enable a clickjacking attack, in which the attacker's page overlays the target application's interface wi...

6.1CVSS6AI score0.00907EPSS
SaveExploits0References4
OSV
OSV
added 2022/03/14 6:50 p.m.33 views

CVE-2022-24733 Improper Restriction of Rendered UI Layers or Frames in Sylius

Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, it is possible for a page controlled by an attacker to load the website within an iframe. This will enable a clickjacking attack, in which the attacker's page overlays the target application's interface wi...

6.1CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2022/03/14 6:50 p.m.35 views

CVE-2022-24733 Improper Restriction of Rendered UI Layers or Frames in Sylius

Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, it is possible for a page controlled by an attacker to load the website within an iframe. This will enable a clickjacking attack, in which the attacker's page overlays the target application's interface wi...

6.1CVSS6.1AI score0.00907EPSS
SaveExploits0References4
OSV
OSV
added 2022/03/12 10:15 p.m.17 views

AZL-9019 CVE-2022-26966 affecting package kernel for versions less than 5.15.26.1-2

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...

5.5CVSS6.7AI score0.00346EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/12 10:15 p.m.3 views

CVE-2022-26966

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...

5.5CVSS6.8AI score0.00346EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/12 10:15 p.m.12 views

CVE-2022-26966

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...

5.5CVSS5.8AI score
SaveExploits0References4
OSV
OSV
added 2022/03/12 10:15 p.m.2 views

DEBIAN-CVE-2022-26966

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...

5.5CVSS6.3AI score0.00346EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/12 9:30 p.m.33 views

CVE-2022-26966

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device...

6.1AI score0.00346EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/03/12 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States.Linux is the open source operating system of the Linux Foundation in the United States. A security vulnerability existed in Linux kernel prior to 5.16.12. The vulnerability...

5.5CVSS6.6AI score0.00346EPSS
SaveExploits0References20
Rows per page
Query Builder