Lucene search
+L

32 matches found

Tenable Nessus
Tenable Nessus
•added 2026/06/18 12:00 a.m.•22 views

Devolutions Remote Desktop Manager <= 2026.2.8 Improper Host Validation (DEVO-2026-0018)(CVE-2026-12162)

The version of Devolutions Remote Desktop Manager installed on the remote host is 2025.2.8 or earlier. It is, therefore, affected by an improper host validation vulnerability: - Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an...

5.5CVSS5.9AI score0.00147EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/16 1:16 a.m.•28 views

CVE-2026-12162

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain...

5.5CVSS0.00147EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/16 12:00 a.m.•12 views

CVE-2026-12162: Improper Validation of Certificate with Host Mismatch

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•41 views

PT-2026-49550

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain...

5.2AI score0.00147EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-11568

Malware in sbrugna...

5.5CVSS6.6AI score0.00313EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2020-26962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in...

6.1CVSS6.8AI score0.00698EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 4:34 p.m.•13 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.2AI score0.00698EPSS
SaveExploits0
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•41 views

Unspecified Vulnerability in Mozilla FireFox (CNVD-2021-00393)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 83, which stems from the fact that a cross-domain iframe containing a login form may have been recognized and populated by the login...

6.1CVSS8.7AI score0.00698EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/09 1:15 a.m.•10 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.9AI score0.00698EPSS
SaveExploits0References2
Mend
Mend
•added 2020/12/09 12:24 a.m.•4 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS0.00698EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/09 12:00 a.m.•5 views

CVE-2020-26962: Improper Restriction of Rendered UI Layers or Frames

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS5.8AI score0.00698EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2020/11/17 12:00 a.m.•40 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.8AI score0.00698EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/11/17 12:00 a.m.•5 views

PT-2020-16576

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 83 Description The issue allows cross-origin iframes with a login form to be recognized and populated by the login autofill service. This could be exploited in clickjacking attacks and also allows data to be read acro...

6.1CVSS0.00698EPSS
SaveExploits0
CNNVD
CNNVD
•added 2020/11/17 12:00 a.m.•24 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 83, which stems from the fact that a cross-domain iframe containing a login form may have been recognized and populated by the login...

6.1CVSS6.8AI score0.00698EPSS
SaveExploits0References5
OSV
OSV
•added 2020/11/17 12:00 a.m.•17 views

UBUNTU-CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.7AI score0.00698EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/08/12 12:00 a.m.•24 views

Mozilla Firefox Path Traversal Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 28 for iOS-based platforms. An attacker can exploit the vulnerability with a malicious page to override the WKUserScript script o...

6.5CVSS6.5AI score0.00852EPSS
SaveExploits0References1
OSV
OSV
•added 2020/08/10 6:15 p.m.•15 views

CVE-2020-15661

A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain. This vulnerability affects Firefox for iOS 28...

6.5CVSS6.6AI score
SaveExploits0References2
CNVD
CNVD
•added 2020/07/16 12:00 a.m.•23 views

Apple Safari Login AutoFill Component Logic Flaw Vulnerability

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in the Safari Login AutoFill component in Apple Safari versions prior to 13.1.2, iOS versions prior to 13.6, and iPadOS versions prior ...

7.5CVSS6.5AI score0.00507EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/04/24 12:00 a.m.•15 views

Apple SafarS and iOS Safari Login AutoFill Information Disclosure Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari Login AutoFill is one of the auto-fill field component. A security...

7.5CVSS6.4AI score0.02299EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/04/03 12:00 a.m.•2 views

PT-2018-16426

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 Safari versions prior to 11.1 Description The issue involves the Safari Login AutoFill component, which allows remote attackers to read autofilled data by leveraging the lack of a user-confirmation requirement...

7.5CVSS0.02299EPSS
SaveExploits0References5
Rows per page
Query Builder