Lucene search
K

310 matches found

Snyk
Snyk
added 2025/09/17 7:43 p.m.2 views

Origin Validation Error

Overview @parcel/reporter-dev-server is a Blazing fast, zero configuration web application bundler Affected versions of this package are vulnerable to Origin Validation Error via improper origin validation in the development server. An attacker can access source code by tricking a developer into...

6.5CVSS6.5AI score0.00009EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/09/17 12:0 a.m.6 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

0.00009EPSS
Exploits1References4
CVE
CVE
added 2025/09/17 12:0 a.m.14 views

CVE-2025-56648

CVE-2025-56648 affects npm parcel 2.0.0-alpha and earlier, with an Origin Validation Error. The vulnerability allows a malicious site to send XMLHTTPRequests to the development server and read the response, potentially stealing source code when developers visit the site. The CVSSv3.1 base score i...

6.5CVSS6.8AI score0.00009EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/17 12:0 a.m.1 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

6.8AI score0.00009EPSS
Exploits1References4
Snyk
Snyk
added 2025/09/16 12:45 p.m.2 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird-ESR to version 140.3 or...

8.8CVSS7.4AI score0.00088EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/16 12:45 p.m.1 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox to version 143.0 or higher...

8.8CVSS7.4AI score0.00088EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/16 12:45 p.m.1 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird to version 143.0 or higher...

8.8CVSS7.4AI score0.00088EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/16 12:45 p.m.1 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the rendering process. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox-ESR to version 140.3 or higher...

8.8CVSS7.4AI score0.00088EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/11 11:26 p.m.3 views

Origin Validation Error

Overview mcp-neo4j-cypher is an A simple Neo4j MCP server Affected versions of this package are vulnerable to Origin Validation Error via the lack of proper origin validation in the server's request handling. An attacker can execute unauthorized tool invocations against locally running instances ...

7.4CVSS6.8AI score0.00032EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/10 7:44 p.m.2 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the Mojo process. An attacker can bypass site isolation protections by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.127 or higher. References -...

8.8CVSS6.6AI score0.00037EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/05 1:28 p.m.0 views

CVE-2024-13068

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing.This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS7AI score0.00038EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/04 12:30 p.m.3 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00027EPSS
Exploits0References1
NVD
NVD
added 2025/09/03 2:15 p.m.1 views

CVE-2024-13068

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS0.00038EPSS
Exploits0References2
CVE
CVE
added 2025/09/03 1:12 p.m.7 views

CVE-2024-13068

CVE-2024-13068 describes an Origin Validation Error in Akinsoft LimonDesk that allows Forceful Browsing. Affected versions are s1.02.14 through before v1.02.17. The issue stems from improper origin validation, enabling access to restricted resources without proper authorization. CVSS v3.1 base sc...

7.3CVSS5.8AI score0.00038EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/03 1:12 p.m.2 views

CVE-2024-13068

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS5.8AI score0.00038EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/09/03 1:12 p.m.1 views

CVE-2024-13068 Host Header Injection in Akinsoft's LimonDesk

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS5.8AI score0.00038EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.0 views

PT-2025-35715

Name of the Vulnerable Software and Affected Versions: Akinsoft LimonDesk versions s1.02.14 through s1.02.16 Description: An origin validation error exists in Akinsoft LimonDesk, allowing for forceful browsing. Recommendations: Update Akinsoft LimonDesk to version 1.02.17 or later...

7.3CVSS6.4AI score0.00038EPSS
Exploits0References5
NVD
NVD
added 2025/09/02 12:15 p.m.1 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00027EPSS
Exploits0References2
CVE
CVE
added 2025/09/02 11:43 a.m.7 views

CVE-2024-12973

CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...

4.7CVSS5.8AI score0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 11:43 a.m.2 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00027EPSS
Exploits0References2
Rows per page
Query Builder