Lucene search
+L

2461 matches found

SUSE CVE
SUSE CVE
•added 2024/03/07 4:25 a.m.•11 views

SUSE CVE-2024-1936

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a third-party. Whil...

7.5CVSS8.8AI score0.00682EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2024/03/06 1:42 p.m.•43 views

CVE-2024-1936

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the...

7.5CVSS6.9AI score0.00682EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/06 1:15 a.m.•15 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits5References2
attackerkb
attackerkb
•added 2024/03/06 1:15 a.m.•17 views

CVE-2023-49976

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS6.2AI score0.00466EPSS
SaveExploits5References3
Prion
Prion
•added 2024/03/06 1:15 a.m.•22 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.9AI score0.00466EPSS
SaveExploits5References2
CNVD
CNVD
•added 2024/03/06 12:00 a.m.•6 views

Mozilla Thunderbird Security Bypass Vulnerability (CNVD-2024-25572)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. Mozilla Thunderbird suffers from a security bypass vulnerability that is caused by the...

7.5CVSS8.4AI score0.00682EPSS
SaveExploits1References1
zdt
zdt
•added 2024/03/06 12:00 a.m.•386 views

Customer Support System 1.0 - Multiple SQL injection Vulnerability

Exploit Title: Customer Support System 1.0 - Multiple SQL injection vulnerabilities Exploit Author: Geraldo Alcantara Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

8.8CVSS8.9AI score0.13754EPSS
SaveExploits6
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•19 views

Customer Support System 跨站脚本漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits5References4
Packet Storm
Packet Storm
•added 2024/03/06 12:00 a.m.•491 views

Customer Support System 1.0 SQL Injection

Exploit Title: Customer Support System 1.0 - Multiple SQL injection vulnerabilities Date: 15/12/2023 Exploit Author: Geraldo Alcantara Vendor Homepage: https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html Software Link:...

8.8CVSS7.4AI score0.13754EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•3 views

CVE-2023-49976: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits5References2
attackerkb
attackerkb
•added 2024/03/05 12:15 a.m.•28 views

CVE-2023-49970

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...

9.8CVSS5.9AI score0.00818EPSS
SaveExploits2References3
OSV
OSV
•added 2024/03/05 12:15 a.m.•19 views

CVE-2023-49970

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...

9.8CVSS5.8AI score0.00818EPSS
SaveExploits2References2
NVD
NVD
•added 2024/03/05 12:15 a.m.•22 views

CVE-2023-49970

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...

9.8CVSS7.8AI score0.00818EPSS
SaveExploits2References2
Prion
Prion
•added 2024/03/05 12:15 a.m.•38 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...

8.2AI score0.00818EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•14 views

Customer Support System 安全漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

9.8CVSS8.3AI score0.00818EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2024/03/05 12:00 a.m.•44 views

Mozilla Thunderbird < 115.8.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.8.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-11 advisory. - The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other...

7.5CVSS8AI score0.00682EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/03/05 12:00 a.m.•23 views

Mozilla Thunderbird < 115.8.1

The version of Thunderbird installed on the remote Windows host is prior to 115.8.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-11 advisory. - The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email messa...

7.5CVSS8AI score0.00682EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/04 10:15 p.m.•15 views

CVE-2024-1936

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a third-party. Whil...

7.5CVSS7.5AI score
SaveExploits0References3
OSV
OSV
•added 2024/03/04 10:15 p.m.•5 views

DEBIAN-CVE-2024-1936

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a third-party. Whil...

7.5CVSS7.4AI score0.00682EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2024/03/04 10:15 p.m.•28 views

CVE-2024-1936

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Consequently, when replying to the contaminated email message, the user might accidentally leak the confidential subject to a third-party. Whil...

7.5CVSS7.1AI score0.00682EPSS
SaveExploits1References5
Rows per page
Query Builder