Lucene search
K

537 matches found

NVD
NVD
added 2021/03/10 4:15 p.m.8 views

CVE-2021-24030

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0...

9.8CVSS0.01161EPSS
Exploits0References1
Prion
Prion
added 2021/03/10 4:15 p.m.19 views

Design/Logic Flaw

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0...

7.5CVSS9.4AI score0.01161EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/03/10 3:50 p.m.53 views

CVE-2021-24030

The CVE-2021-24030 issue affects Facebook Gameroom’s fbgames protocol handler, where arguments to the executable are not properly quoted. This causes code execution if a malicious URL is processed. Affected versions are prior to v1.26.0; upgrading to v1.26.0 or later is the stated remediation. Th...

9.8CVSS9.4AI score0.01161EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/11/24 12:0 a.m.2 views

JetBrains Toolbox Remote Code Execution Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A remote code execution vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from vulnerability to attacks that execute remote code via a browser protocol handler. No details...

10CVSS8.1AI score0.00035EPSS
Exploits0References1
CNVD
CNVD
added 2020/11/24 12:0 a.m.2 views

JetBrains Toolbox Denial of Service Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A denial-of-service vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from susceptibility to denial-of-service attacks via the browser protocol handler. No detailed...

7.5CVSS6.8AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2020/11/16 3:15 p.m.1 views

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

9.8CVSS7.4AI score
Exploits0References2
NVD
NVD
added 2020/11/16 3:15 p.m.14 views

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

7.5CVSS7.4AI score0.00006EPSS
Exploits0References2
OSV
OSV
added 2020/11/16 3:15 p.m.1 views

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

7.5CVSS7.1AI score0.00006EPSS
Exploits0References2
NVD
NVD
added 2020/11/16 3:15 p.m.13 views

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

10CVSS9.7AI score0.00035EPSS
Exploits0References2
Prion
Prion
added 2020/11/16 3:15 p.m.20 views

Design/Logic Flaw

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

5CVSS7.4AI score0.00006EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2020/11/16 3:15 p.m.18 views

Remote code execution

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

10CVSS9.5AI score0.00035EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/16 3:1 p.m.14 views

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

9.7AI score0.00035EPSS
Exploits0References2
CVE
CVE
added 2020/11/16 3:1 p.m.166 views

CVE-2020-25207

CVE-2020-25207 affects JetBrains Toolbox prior to version 1.18. The vulnerability enables remote code execution via a browser protocol handler, with CVSS 3.1 base score 9.8 (CRITICAL). Connected documents confirm the issue and vector but do not specify a patched version; no exploitation details a...

10CVSS9.5AI score0.00035EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/11/16 3:0 p.m.157 views

CVE-2020-25013

CVE-2020-25013 : JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service through a browser protocol handler. The issue arises in the tool’s handling of browser protocol links, allowing a DoS condition. Connected sources corroborate the vendor advisory and related security bulle...

7.5CVSS7.4AI score0.00006EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/16 3:0 p.m.15 views

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

7.4AI score0.00006EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.2 views

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A remote code execution vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from vulnerability to attacks that execute remote code via a browser protocol handler. No details...

10CVSS7.9AI score0.00035EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.3 views

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A denial-of-service vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from susceptibility to denial-of-service attacks via the browser protocol handler. No detailed...

7.5CVSS7.1AI score0.00006EPSS
Exploits0References2
Veracode
Veracode
added 2020/10/25 12:40 p.m.26 views

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an extern...

5.3CVSS2.2AI score0.00318EPSS
Exploits0References2Affected Software6
NVD
NVD
added 2020/10/22 9:15 p.m.13 views

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

5.3CVSS0.00318EPSS
Exploits0References2
OSV
OSV
added 2020/10/22 9:15 p.m.2 views

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

5.3CVSS6.9AI score0.00318EPSS
Exploits0References2
Rows per page
Query Builder