Lucene search
+L

1892 matches found

WPVulnDB
WPVulnDB
•added 2023/11/24 12:00 a.m.•29 views

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

Description The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the getproducts function. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the...

9.8CVSS7.8AI score0.01462EPSS
SaveExploits3References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/11/23 12:00 a.m.•26 views

Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6509-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6509-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...

8.8CVSS7.9AI score0.01406EPSS
SaveExploits0References11
WPVulnDB
WPVulnDB
•added 2023/11/23 12:00 a.m.•45 views

Flatsome < 3.17.6 - Unauthenticated PHP Object Injection

Description The Flatsome theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.17.5 via deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed o...

9.8CVSS7.8AI score0.00602EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/23 12:00 a.m.•38 views

Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection

Description The Master Slider Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.5 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable...

9.8CVSS9.1AI score0.00388EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/21 3:15 p.m.•18 views

CVE-2023-6210

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox 120...

6.5CVSS0.00614EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2023/11/21 3:15 p.m.•34 views

CVE-2023-6210

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox 120...

6.5CVSS6.2AI score0.00614EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2023/11/21 3:15 p.m.•24 views

CVE-2023-6210

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox 120...

6.5CVSS6.8AI score0.00614EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/11/21 2:28 p.m.•31 views

CVE-2023-6210

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox 120...

6.8AI score0.00614EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2023/11/21 2:28 p.m.•54 views

CVE-2023-6210

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox 120...

6.5CVSS8.2AI score0.00614EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/11/21 12:00 a.m.•39 views

Mozilla Firefox < 120.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 120.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-49 advisory. - Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we...

8.8CVSS7.9AI score0.01406EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2023/11/14 12:00 a.m.•14 views

The vulnerability of the pop_fail_stack function in the GNU C Library allows a hacker to trigger a service failure.

The vulnerability of the popfailstack function in the GNU C Library is related to incorrect data processing. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.1CVSS7.1AI score0.0287EPSS
SaveExploits0References9Affected Software2
Openbugbounty
Openbugbounty
•added 2023/11/11 2:56 a.m.•9 views

pop-rot-weiss.de Improper Access Control vulnerability OBB-3777069

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
NVD
NVD
•added 2023/11/08 11:15 a.m.•35 views

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

5.3CVSS0.00317EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/08 11:15 a.m.•32 views

Design/Logic Flaw

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

5CVSS7AI score0.00317EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2023/11/08 10:12 a.m.•77 views

CVE-2023-46756

CVE-2023-46756 describes a permission-control flaw in Huawei HarmonyOS/EMUI’s window management module that can lead to malicious pop-up windows. Documented impact: privilege-control weakness with potential UI disruption; no concrete exploit details, affected versions, or remediation information ...

5.3CVSS5.2AI score0.00317EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/08 10:12 a.m.•43 views

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

5.6AI score0.00317EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/11/08 10:12 a.m.•23 views

CVE-2023-46756

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

7.1AI score0.00317EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/08 12:00 a.m.•12 views

PT-2023-30186 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious...

5.3CVSS7AI score0.00317EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/08 12:00 a.m.•5 views

CVE-2023-46756: Improper Privilege Management

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows...

5.3CVSS6AI score0.00317EPSS
SaveExploits0References2
Imperva Blog
Imperva Blog
•added 2023/11/07 12:20 p.m.•28 views

Imperva Expands Global Network, Adds First PoP in Vietnam

We are delighted to announce our first Point of Presence PoP in Hanoi, Vietnam, expanding our global network with our 16th PoP located in the Asia Pacific & Japan APJ region. Alongside its rich culture and historic sites, Hanoi, the enchanting capital city of Vietnam, is a bustling business cente...

7.1AI score
SaveExploits0
Rows per page
Query Builder