Lucene search
K

76 matches found

OSV
OSV
added 2018/06/11 9:29 p.m.1 views

DEBIAN-CVE-2017-7787

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

7.5CVSS7.8AI score0.00979EPSS
Exploits1References1
OSV
OSV
added 2018/04/19 8:29 p.m.1 views

CVE-2018-0240

Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of servi...

8.6CVSS5.8AI score0.01586EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2018/04/18 12:0 a.m.2 views

PT-2018-1300 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: Multiple vulnerabilities in the Application Layer Protocol Inspection...

8.6CVSS8.7AI score0.01586EPSS
Exploits0References8
OSV
OSV
added 2018/02/08 7:29 a.m.2 views

CVE-2018-0117

A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance VPC-DI Software could allow an unauthenticated, remote attacker to cause both control function CF instances on an affected system to reload, resulting in a denial of service Do...

8.6CVSS5.8AI score
Exploits0References2
CNVD
CNVD
added 2017/09/28 12:0 a.m.2 views

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-34218)

Cisco IOS and IOS XE are both operating systems developed by Cisco for its network devices. Cisco IOS Software/Cisco IOS XE Software has a security vulnerability in the IKEv2 module, where an unauthenticated, remote attacker causes CPU exhaustion, traceroute messages, and reloading of affected...

7.8CVSS6.9AI score0.09271EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2017/08/24 6:45 a.m.1 views

Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

7.5CVSS7.3AI score0.00979EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2017/08/10 11:20 p.m.1 views

Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

7.5CVSS7.3AI score0.00979EPSS
Exploits1References5
OSV
OSV
added 2017/08/10 12:0 a.m.0 views

UBUNTU-CVE-2017-7787

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

7.5CVSS6.7AI score0.00979EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2017/06/08 12:0 a.m.23 views

Cisco NX-OS Software Fibre Channel over Ethernet Denial of Service Vulnerability (cisco-sa-20170607-nxos)

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. Copyright C 2017 Greenbone Networks GmbH Some tex...

6.5CVSS6.4AI score0.00245EPSS
Exploits0References1
OSV
OSV
added 2017/04/20 10:59 p.m.3 views

CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

7.5CVSS5.8AI score0.00541EPSS
Exploits0References3
CNVD
CNVD
added 2016/10/13 12:0 a.m.2 views

Cisco IOS XE Denial of Service Vulnerability (CNVD-2016-09465)

Cisco IOS XE is the United States Cisco Cisco company's next-generation network operator routing system, a fully modular and fully distributed network interconnection operating system. A denial-of-service vulnerability exists in Cisco IOS XE, which allows an attacker to exploit the vulnerability ...

6.5CVSS6.8AI score0.00437EPSS
Exploits0References1
CNVD
CNVD
added 2016/10/12 12:0 a.m.2 views

Cisco NX-OS Denial of Service Vulnerability (CNVD-2016-09438)

Cisco NX-OS on Nexus 2000, etc. is the United States Cisco Cisco company's set of operating system running in the Nexus 2000 and other series of devices. A denial of service vulnerability exists in Cisco NX-OS versions 4.0 through 7.3 and 11.0 through 11.2, which can be exploited by a remote...

7.1CVSS6.8AI score0.01403EPSS
Exploits0References1
CNVD
CNVD
added 2016/09/09 12:0 a.m.2 views

Cisco ACE30 Application Control Engine Module and ACE 4710 Application Control Engine Denial of Service Vulnerabilities

Cisco ACE30 Application Control Engine Module and Cisco ACE 4710 Application Control Engine are both next-generation load balancing and application delivery solutions from Cisco. A denial of service vulnerability exists in the Cisco ACE30 Application Control Engine Module and Cisco ACE 4710...

7.8CVSS6.7AI score0.00743EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2014/12/02 12:0 a.m.31 views

Fedora 20 : phpMyAdmin-4.2.12-1.fc20 (2014-15538)

phpMyAdmin 4.2.12.0 2014-11-20 ================================ - Blank/white page when JavaScript disabled - Multi row actions cause full page reloads - ReferenceError: targeurl is not defined - Incorrect text/icon display in Tracking report - Recordset return from procedure display nothing - Ed...

6.5CVSS8.3AI score0.02772EPSS
Exploits3References9
Saint
Saint
added 2013/08/22 12:0 a.m.56 views

Mozilla Firefox onreadystatechange Event Use After Free

Added: 08/22/2013 CVE: CVE-2013-1690 BID: 60778 OSVDB: 94584 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A use-after-free vulnerability is triggered when handling onreadystatechange events and Event or Page reloads at t...

9.3CVSS9.3AI score0.47055EPSS
Exploits9
Saint
Saint
added 2013/08/22 12:0 a.m.34 views

Mozilla Firefox onreadystatechange Event Use After Free

Added: 08/22/2013 CVE: CVE-2013-1690 BID: 60778 OSVDB: 94584 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A use-after-free vulnerability is triggered when handling onreadystatechange events and Event or Page reloads at t...

9.3CVSS9.2AI score0.47055EPSS
Exploits9
NVD
NVD
added 2012/06/14 7:55 p.m.15 views

CVE-2012-3558

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...

2.6CVSS7.3AI score0.00339EPSS
Exploits0References5
Opera Security Advisories
Opera Security Advisories
added 2012/06/12 12:0 a.m.4 views

Carefully timed reloads, redirects, and navigation can spoof the address field – Opera Security Advisories

The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site’s address, while the attacking site is still being displaye...

5.8AI score
Exploits0References1
Opera Security Advisories
Opera Security Advisories
added 2012/06/12 12:0 a.m.486 views

Carefully timed reloads, redirects, and navigation can spoof the address field

The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site's address, while the attacking site is still being displaye...

3.1AI score
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2012/03/29 12:0 a.m.25 views

Opera Multiple Vulnerabilities - March12 (Linux)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnmar12lin.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera Multiple Vulnerabilities - March12 Linux Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbone Networks GmbH,...

6.8CVSS0.4AI score0.01662EPSS
Exploits0References7
Rows per page
Query Builder