Lucene search
+L

837 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/08 12:00 a.m.•7 views

CVE-2021-45441: Origin Validation Error

A origin validation error vulnerability in Trend Micro Apex One on-prem and SaaS could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to...

7.8CVSS6.1AI score0.00265EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•3 views

CVE-2021-38507: Origin Validation Error

The Opportunistic Encryption feature of HTTP2 RFC 8164 allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP connection, including being same-origin with unencrypted connections on port 80. However, if a second encrypted port on the same IP addre...

6.5CVSS5.9AI score0.00832EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2021/10/19 6:28 p.m.•345 views

Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ open...

10CVSS9.2AI score0.05138EPSS
SaveExploits4
OSV
OSV
•added 2021/10/12 4:30 p.m.•91 views

GHSA-QF6Q-QFWP-VP44 Origin Validation Error in Magento 2

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefor...

8.1CVSS8AI score0.0417EPSS
SaveExploits5References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/08 12:00 a.m.•6 views

CVE-2021-37967: Origin Validation Error

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

4.3CVSS5.5AI score0.00795EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/08 12:00 a.m.•4 views

CVE-2021-37966: Origin Validation Error

Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS5.7AI score0.00708EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/18 12:00 a.m.•5 views

CVE-2021-39270: Origin Validation Error

In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...

7.5CVSS5.7AI score0.0041EPSS
SaveExploits0References2
ICS
ICS
•added 2021/06/29 12:00 a.m.•219 views

AVEVA System Platform (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable from adjacent network/low attack complexity Vendor: AVEVA Software, LLC Equipment: System Platform Vulnerabilities: Missing Authentication for Critical Function, Uncaught Exception, Path Traversal, Origin Validation Error, Improper...

9.8CVSS8.4AI score0.0121EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2021/05/18 9:07 p.m.•104 views

Podman Origin Validation Error

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman versions from 1.8.0...

5.9CVSS6.1AI score0.01145EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/30 12:00 a.m.•5 views

CVE-2021-21229: Origin Validation Error

Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

6.5CVSS5.8AI score0.0085EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/23 12:00 a.m.•5 views

CVE-2021-26291: Origin Validation Error

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...

9.1CVSS5.9AI score0.08691EPSS
SaveExploits2References2
OSV
OSV
•added 2021/04/12 5:15 p.m.•17 views

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

5.5CVSS6.1AI score0.00157EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/12 5:15 p.m.•27 views

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

5.5CVSS0.00157EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/12 5:15 p.m.•32 views

Design/Logic Flaw

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

2.1CVSS5.5AI score0.00157EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/12 4:50 p.m.•33 views

CVE-2020-15734 Same-origin policy vulnerability in Bitdefender Safepay

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

5.5CVSS5.5AI score0.00157EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•6 views

CVE-2020-15734: Origin Validation Error

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

5.5CVSS5.8AI score0.00157EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/31 12:00 a.m.•4 views

CVE-2021-23986: Origin Validation Error

A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing a same-origin policy bypass by the extension, which should not have...

6.5CVSS5.8AI score0.00434EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•3 views

CVE-2021-21163: Origin Validation Error

Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server...

6.5CVSS7.6AI score0.0094EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•4 views

CVE-2021-21164: Origin Validation Error

Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00814EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•6 views

CVE-2021-21184: Origin Validation Error

Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.5AI score0.0104EPSS
SaveExploits1References2
Rows per page
Query Builder