Lucene search
+L

354 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:46 a.m.•9 views

SUSE CVE-2017-7784

A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

7.5CVSS9.3AI score0.03572EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:14 a.m.•15 views

SUSE CVE-2019-9796

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leav...

7.5CVSS9AI score0.0206EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2023/02/15 3:52 a.m.•8 views

SUSE CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

6.5CVSS8.4AI score0.0085EPSS
SaveExploits0References4
Circl
Circl
•added 2023/01/14 12:36 a.m.•17 views

CVE-2022-42136

creationtimestamp| type| source ---|---|--- 2023-01-14 00:36:26+00:00| seen| https://t.me/cibsecurity/56493...

8.8CVSS8.1AI score0.00881EPSS
SaveExploits0References1
Circl
Circl
•added 2022/09/23 10:13 p.m.•15 views

CVE-2022-35096

creationtimestamp| type| source ---|---|--- 2022-09-23 22:13:53+00:00| seen| https://t.me/cibsecurity/50379...

5.5CVSS5.5AI score0.00418EPSS
SaveExploits1References1
OSV
OSV
•added 2022/08/19 3:55 a.m.•14 views

MAL-2022-5765 Malicious code in resize-obsever-pulyfjll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecad73c257b6414fec8cc651d7b3f4b6c6eb420c0ac9259ad3440f7d56276dd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
•added 2022/06/23 9:25 a.m.•10 views

Malicious Package

Overview epic-am-observer-store is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2022/01/06 10:08 p.m.•5 views

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...

8.1CVSS7.8AI score0.00741EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/06/07 12:16 p.m.•13 views

jamaicaobserver.com Cross Site Scripting vulnerability OBB-2041850

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jamaicaobserver.com ---|--- Open Bug...

6.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•31 views

The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application of the Aurora operating system allows a perpetrator to trigger a service failure.

The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application for the Aurora operating system is related to the use of dynamic memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.2CVSS5.5AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2021/01/20 8:15 p.m.•19 views

CVE-2021-1303

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

8.8CVSS5.9AI score0.01404EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/20 7:55 p.m.•34 views

CVE-2021-1303 Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

4.3CVSS8.9AI score0.01404EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/01/20 4:00 p.m.•62 views

Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

4.3CVSS6.7AI score0.01404EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/20 4:00 p.m.•8 views

CVE-2021-1303

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

8.8CVSS6.2AI score0.01404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/01/20 12:00 a.m.•25 views

PT-2021-1839 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: The issue is related to improper enforcement of actions for assigned user roles in the user management service. This could allow a remote attacker to execute unauthorized commands ...

8.8CVSS5.2AI score0.01404EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•2 views

CVE-2021-1303: Incorrect Privilege Assignment

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

8.8CVSS6.2AI score0.01404EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/12/21 12:00 a.m.•16 views

Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-00391)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in FireFox versions prior to FireFox 83, which stems from the fact that when listening for page changes using a mutation observer, a malicious web page may cause Firefox...

6.5CVSS8.7AI score0.0085EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/09 1:15 a.m.•10 views

CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

6.5CVSS7.1AI score0.0085EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/09 1:15 a.m.•36 views

Code injection

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

4.3CVSS6.6AI score0.0085EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/12/09 12:25 a.m.•2 views

CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

7.1CVSS0.0085EPSS
SaveExploits0References4
Rows per page
Query Builder