Lucene search
+L

87 matches found

OSV
OSV
added 2020/12/22 5:24 p.m.8 views

OPENSUSE-SU-2020:2318-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-55 bsc1180039 CVE-2020-16042 bmo1679003 Operations on a BigInt could have caused uninitialized memory to be exposed...

8.8CVSS8AI score0.01876EPSS
SaveExploits0References10
OSV
OSV
added 2020/12/21 7:11 p.m.27 views

SUSE-SU-2020:3903-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-55 bsc1180039 CVE-2020-16042 bmo1679003 Operations on a BigInt could have caused uninitialized memory to be exposed...

8.8CVSS8AI score0.01876EPSS
SaveExploits0References10
OSV
OSV
added 2020/12/21 9:30 a.m.10 views

SUSE-SU-2020:14584-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-55 bsc1180039 CVE-2020-16042 bmo1679003 Operations on a BigInt could have caused uninitialized memory to be exposed...

8.8CVSS8AI score0.01876EPSS
SaveExploits0References10
OSV
OSV
added 2020/02/04 5:15 a.m.11 views

CVE-2020-3938

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests...

7.5CVSS7.1AI score0.01481EPSS
SaveExploits0References2
OSV
OSV
added 2019/11/26 1:15 a.m.15 views

CVE-2011-3600

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...

7.5CVSS7.6AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2019/10/09 3:47 p.m.34 views

CVE-2017-7553

The externalrequest api call in App Studio millicore allows server side request forgery SSRF. An attacker could use this flaw to probe the network internal resources and access restricted endpoints...

6.5CVSS3.3AI score0.00699EPSS
SaveExploits0References1
Prion
Prion
added 2017/09/29 1:34 a.m.23 views

Server side request forgery (ssrf)

The externalrequest api call in App Studio millicore allows server side request forgery SSRF. An attacker could use this flaw to probe the network internal resources, and access restricted endpoints...

6.5CVSS7.7AI score0.00699EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder