Lucene search
+L

10979 matches found

NVD
NVD
added 2022/12/22 8:15 p.m.32 views

CVE-2022-42927

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

8.1CVSS0.00414EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/22 8:15 p.m.5 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS7.3AI score0.00318EPSS
SaveExploits0References2
NVD
NVD
added 2022/12/22 8:15 p.m.17 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS0.00318EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/22 8:15 p.m.5 views

CVE-2022-29915

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

4.3CVSS7.4AI score0.00287EPSS
SaveExploits1References2
NVD
NVD
added 2022/12/22 8:15 p.m.21 views

CVE-2022-29915

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

4.3CVSS0.00287EPSS
SaveExploits1References2
Prion
Prion
added 2022/12/22 8:15 p.m.21 views

Spoofing

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

5.8CVSS5.9AI score0.00318EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/12/22 8:15 p.m.20 views

Design/Logic Flaw

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

4.3CVSS4.6AI score0.00287EPSS
SaveExploits1References2Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
added 2022/12/22 12:00 a.m.11 views

When and How to Use AWS Graviton

Discover how AWS Graviton’s optimized processors help provide a superior price-performance ratio. Available for AWS-managed services, you’ll gain insight on strategies, use cases, and insight on how to get the most out of AWS Graviton...

2.3AI score
SaveExploits0
Cvelist
Cvelist
added 2022/12/22 12:00 a.m.49 views

CVE-2022-29915

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

6.1AI score0.00287EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/12/22 12:00 a.m.37 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

7.2AI score0.00318EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/22 12:00 a.m.187 views

CVE-2022-36316

CVE-2022-36316 affects Mozilla Firefox

6.1CVSS6.7AI score0.00318EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/22 12:00 a.m.8 views

CVE-2022-29915

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

6.5AI score0.00287EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/12/22 12:00 a.m.7 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6AI score0.00318EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/12/22 12:00 a.m.76 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS8AI score0.00318EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/12/22 12:00 a.m.45 views

CVE-2022-42927

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

8.1CVSS8AI score0.00414EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/12/22 12:00 a.m.99 views

CVE-2022-36316

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...

6.1CVSS7AI score0.00318EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/12/22 12:00 a.m.99 views

CVE-2022-29915

The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affects Firefox 100...

4.3CVSS6AI score0.00287EPSS
SaveExploits1
Akamai Blog
Akamai Blog
added 2022/12/20 2:00 p.m.14 views

Boost Your Page Load Times with Performance Engineering, Part 1 of 5

Get up to speed with web performance, the Core Web Vitals, and other metrics to increase your revenue and rank your page higher on Google...

0.6AI score
SaveExploits0
Kitploit
Kitploit
added 2022/12/20 11:30 a.m.51 views

HTTPLoot - An Automated Tool Which Can Simultaneously Crawl, Fill Forms, Trigger Error/Debug Pages And "Loot" Secrets Out Of The Client-Facing Code Of Sites

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the source cod...

7.1AI score
SaveExploits0References5
NVD
NVD
added 2022/12/19 5:15 p.m.16 views

CVE-2022-40435

Employee Performance Evaluation System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via adding new entries under the Departments and Designations module...

4.8CVSS0.00436EPSS
SaveExploits1References2
Rows per page
Query Builder