Lucene search
+L

837 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/08 12:00 a.m.•3 views

CVE-2023-27962: Origin Validation Error

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system...

5.5CVSS7.2AI score0.00159EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/08 12:00 a.m.•1 views

CVE-2023-27932: Origin Validation Error

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

5.5CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/02 12:00 a.m.•5 views

CVE-2023-2445: Origin Validation Error

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name...

4.9CVSS5.8AI score0.00979EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•2 views

CVE-2022-45139: Origin Validation Error

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of...

5.3CVSS5.8AI score0.00254EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/18 12:00 a.m.•4 views

CVE-2021-33959: Origin Validation Error

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service...

7.5CVSS5.7AI score0.15035EPSS
SaveExploits1References3
OSV
OSV
•added 2023/01/10 3:30 a.m.•30 views

GHSA-2PJ2-GCHF-WMW7 Zip4j Origin Validation Error

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...

5.9CVSS7AI score0.00624EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•4 views

CVE-2023-0132: Origin Validation Error

Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.6AI score0.00496EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•2 views

CVE-2017-20146: Origin Validation Error

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy...

9.8CVSS5.8AI score0.00705EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•2 views

CVE-2022-22757: Origin Validation Error

Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability affect...

6.5CVSS5.8AI score0.00237EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•2 views

CVE-2022-1520: Origin Validation Error

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A...

4.3CVSS5.8AI score0.00268EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•3 views

CVE-2022-38472: Origin Validation Error

An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. This vulnerability affects Thunderbird 102.2,...

6.5CVSS5.8AI score0.00374EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•1 views

CVE-2022-29915: Origin Validation Error

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

4.3CVSS5.8AI score0.0029EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•2 views

CVE-2022-42927: Origin Validation Error

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

8.1CVSS5.8AI score0.00426EPSS
SaveExploits0References3
NVD
NVD
•added 2022/10/13 8:15 p.m.•39 views

CVE-2022-3457

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

9.8CVSS0.00362EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/13 8:15 p.m.•11 views

PYSEC-2022-43161

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

9.8CVSS9.5AI score0.00362EPSS
SaveExploits0References3
CVE
CVE
•added 2022/10/13 12:00 a.m.•88 views

CVE-2022-3457

CVE-2022-3457 documents an Origin Validation Error in the rdiffweb project by ikus060, prior to version 2.5.0a5. The issue arises from improper origin validation in web traffic, enabling an access-control-related vulnerability. Public references in GHSA and OSV entries corroborate the same adviso...

9.8CVSS6.1AI score0.00362EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/13 12:00 a.m.•3 views

CVE-2022-3457: Origin Validation Error

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

9.8CVSS6.1AI score0.00362EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/10/13 12:00 a.m.•43 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS9.8AI score0.00362EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/13 12:00 a.m.•31 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS4.7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/10/13 12:00 a.m.•7 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS9.5AI score0.00362EPSS
SaveExploits0References2
Rows per page
Query Builder