Lucene search
+L

17969 matches found

CNNVD
CNNVD
•added 2023/10/24 12:00 a.m.•24 views

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 119, which originates from a website that may obscure full-screen notifications by using a file open dialog box. This may cause user confusion...

4.3CVSS6.4AI score0.00603EPSS
SaveExploits0References11
Snyk
Snyk
•added 2023/10/19 10:57 p.m.•9 views

Cross-site Scripting (XSS)

Overview TinyMCE is a web-based JavaScript HTML WYSIWYG editor control. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Notification Manager API due to improper input sanitization. An attacker can execute arbitrary JavaScript when a notification is presented i...

6.1CVSS5.5AI score0.00634EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/17 10:15 p.m.•38 views

CVE-2023-22090

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Events & Notifications. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

6.5CVSS6.1AI score0.00642EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/17 9:03 p.m.•103 views

CVE-2023-22090

CVE-2023-22090 affects Oracle PeopleSoft Enterprise CC Common Application Objects (component: Events & Notifications) version 9.2. The vulnerability arises from insufficient input validation in the CC Common Application Objects, allowing a low-privileged attacker with HTTP-access network reach to...

6.5CVSS6.2AI score0.00642EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•9 views

CVE-2023-22090: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Events & Notifications. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

6.5CVSS6.5AI score0.00642EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/11 12:15 p.m.•33 views

CVE-2023-44101

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS7.5AI score0.00412EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/11 12:15 p.m.•18 views

CVE-2023-44101

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/11 12:15 p.m.•37 views

Design/Logic Flaw

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...

5CVSS7.5AI score0.00412EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/11 11:48 a.m.•23 views

CVE-2023-44101

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...

6.9AI score0.00412EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/11 11:48 a.m.•79 views

CVE-2023-44101

The CVE-2023-44101 issue affects Huawei HarmonyOS Bluetooth module, due to improper permission control for broadcast notifications. This vulnerability could lead to confidentiality disclosure if exploited. Documents consistently cite the Bluetooth component and permission-control weakness as the ...

7.5CVSS7.5AI score0.00412EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2023/10/11 12:00 a.m.•9 views

Slackware: Security Advisory (SSA:2023-283-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/09 12:00 a.m.•14 views

PT-2023-28042 · WordPress · Hide Admin Notices – Admin Notification Center

Name of the Vulnerable Software and Affected Versions: Rémi Leclercq Hide admin notices – Admin Notification Center plugin versions prior to 2.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user in...

8.8CVSS8.8AI score0.00256EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2023/10/02 9:15 p.m.•12 views

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5.4CVSS5.8AI score0.00249EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/02 9:15 p.m.•35 views

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5.4CVSS5.5AI score0.00249EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/10/02 9:15 p.m.•17 views

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5.4CVSS5.8AI score0.00249EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/02 9:15 p.m.•25 views

Code injection

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5.5CVSS5.5AI score0.00249EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2023/10/02 8:15 a.m.•20 views

CVE-2023-41731

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin = 1.0.2.2 versions...

4.8CVSS5.8AI score0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/02 12:00 a.m.•13 views

CVE-2023-43297

An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

6.8AI score0.00249EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/10/02 12:00 a.m.•6 views

PT-2023-28764

Name of the Vulnerable Software and Affected Versions animal-art-lab version 13.6.1 Description The issue allows attackers to send crafted notifications via leakage of the channel access token. This can potentially lead to unauthorized access and manipulation of notifications. Recommendations For...

5.4CVSS5.8AI score0.00249EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•25 views

Animal-art-lab Security Breach

animal-art-lab is an application. A security vulnerability exists in Animal-art-lab version v13.6.1, which stems from a vulnerability that allows an attacker to send a notification by revealing the access token of a channel...

5.4CVSS6.8AI score0.00249EPSS
SaveExploits1References2
Rows per page
Query Builder