Lucene search
+L

3552 matches found

Cvelist
Cvelist
•added 2021/11/09 2:36 p.m.•37 views

CVE-2021-43192

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

6.4AI score0.00708EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/09 2:36 p.m.•69 views

CVE-2021-43192

CVE-2021-43192 describes an iOS URL scheme hijacking vulnerability in JetBrains YouTrack Mobile prior to version 2021.2. The provided documents consistently state: “In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.” The JetBrains security bulletin entry for YouTrac...

5.3CVSS5AI score0.00708EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/09 12:00 a.m.•9 views

CVE-2021-43192: Undefined Security Weakness

In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible...

5.3CVSS5.8AI score0.00708EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/09 12:00 a.m.•5 views

PT-2021-23774

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack Mobile versions prior to 2021.2 Description The issue concerns iOS URL scheme hijacking. Recommendations For versions prior to 2021.2, update to version 2021.2 or later to resolve the issue...

5.3CVSS0.00708EPSS
SaveExploits0References4
HackRead
HackRead
•added 2021/11/05 1:13 p.m.•25 views

Twitter hacker charged in sim swapping, cryptocurrency scheme

By Waqas The 22-year-old British national Joseph James O’Connor, aka PlugwalkJoe, was one of the hackers behind 2020's massive Twitter hack. This is a post from HackRead.com Read the original post: Twitter hacker charged in sim swapping, cryptocurrency scheme...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/11/04 4:59 p.m.•12 views

thunderbird: Memory corruption when processing S/MIME messages

A flaw was found in Thunderbird, which is vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

9.8CVSS7.3AI score0.17563EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2021/11/04 4:47 p.m.•27 views

thunderbird: Memory corruption when processing S/MIME messages

A flaw was found in Thunderbird, which is vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

9.8CVSS7.3AI score0.17563EPSS
SaveExploits0References7
Malwarebytes
Malwarebytes
•added 2021/11/03 1:35 a.m.•120 views

This Steam phish baits you with free Discord Nitro

Weeks ago, we talked about the one effective lure that could get a Discord user to consider clicking on a scam link they were generously given, either by a random user or a legitimate contact who also happened to have fallen for the same ploy: free Discord Nitro subscriptions. And similar to how...

6.9AI score
SaveExploits0
OSV
OSV
•added 2021/11/03 1:15 a.m.•10 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS7AI score0.01155EPSS
SaveExploits1References7
NVD
NVD
•added 2021/11/03 1:15 a.m.•21 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS0.01155EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2021/11/03 1:15 a.m.•35 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS6.9AI score0.01155EPSS
SaveExploits1References5
OSV
OSV
•added 2021/11/03 1:15 a.m.•11 views

UBUNTU-CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS6.9AI score0.01155EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2021/11/03 12:03 a.m.•66 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS8.1AI score0.01155EPSS
SaveExploits1
CVE
CVE
•added 2021/11/03 12:03 a.m.•243 views

CVE-2021-38492

CVE-2021-38492 affects Mozilla Firefox on Windows, where delegating navigations to the OS could accept mk: URLs and load Internet Explorer in unprivileged mode. The vulnerability impacts Firefox versions older than 92 (and related Thunderbird/ ESR lines). Remediation is to upgrade to Firefox 92+ ...

6.5CVSS6.5AI score0.01155EPSS
SaveExploits1References7Affected Software3
AlpineLinux
AlpineLinux
•added 2021/11/03 12:03 a.m.•89 views

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS6.9AI score0.01155EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•4 views

CVE-2021-38492: Undefined Security Weakness

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability...

6.5CVSS6AI score0.01155EPSS
SaveExploits1References1
ThreatPost
ThreatPost
•added 2021/11/02 8:55 p.m.•41 views

Squid Game Crypto Scammers Rip Off Investors for Millions

Players in the Squid Game cryptocurrency market have been eliminated — at least their investment has — by what cryptocurrency watchers have called a classic “rug-pull” scam. When SQUID tokens were first released last week, they were valued at a paltry $0.01 but promised entry into a game with the...

7.2AI score
SaveExploits0References10
OSV
OSV
•added 2021/10/13 9:15 a.m.•19 views

CVE-2021-20834

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

6.1CVSS5.9AI score0.01195EPSS
SaveExploits0References3
Prion
Prion
•added 2021/10/13 9:15 a.m.•22 views

Authorization

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

5.8CVSS6AI score0.01195EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/10/13 9:15 a.m.•11 views

CVE-2021-20834

Improper authorization in handler for custom URL scheme vulnerability in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

6.1CVSS6AI score0.01195EPSS
SaveExploits0References4
Rows per page
Query Builder