Lucene search
+L

108 matches found

NVD
NVD
added 2022/12/22 8:15 p.m.20 views

CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

6.5CVSS0.00663EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/12/22 8:15 p.m.5 views

CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

6.5CVSS6.7AI score0.00663EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/22 8:15 p.m.3 views

DEBIAN-CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

6.5CVSS6.8AI score0.00663EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/12/22 12:0 a.m.12 views

CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

6.9AI score0.00663EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/12/22 12:0 a.m.22 views

CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

7.3AI score0.00663EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/12/22 12:0 a.m.48 views

CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

6.5CVSS7.2AI score0.00663EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/09/26 4:34 p.m.7 views

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.5CVSS6.9AI score0.00663EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/09/26 3:57 p.m.12 views

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.5CVSS6.9AI score0.00663EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/09/26 3:41 p.m.7 views

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.5CVSS6.9AI score0.00663EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/09/26 3:37 p.m.7 views

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.5CVSS6.9AI score0.00663EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/09/26 3:15 p.m.8 views

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.5CVSS6.9AI score0.00663EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/09/26 2:54 p.m.9 views

Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc attribute was not blocked

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.5CVSS6.9AI score0.00663EPSS
SaveExploits0References6
Veracode
Veracode
added 2022/09/19 1:0 p.m.31 views

Unsecured File

thunderbird allows unsecured files. The vulnerability exists due to an issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or videos, were no...

6.5CVSS7.2AI score0.00663EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.11 views

The vulnerability of the Thunderbird email client, related to errors in processing input data, allows a hacker to circumvent existing security restrictions.

The vulnerability of the Thunderbird email client is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by sending a specially crafted email with the iframe srcdoc attribute...

10CVSS6.7AI score0.00663EPSS
SaveExploits0References9Affected Software4
RedhatCVE
RedhatCVE
added 2022/09/01 9:53 a.m.39 views

CVE-2022-3032

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the internal HTML document, remote objects specified in the nested document for example, images or...

6.1CVSS1.6AI score0.00663EPSS
SaveExploits0References5
OSV
OSV
added 2022/09/01 12:0 a.m.7 views

UBUNTU-CVE-2022-3032

When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...

6.5CVSS6.7AI score0.00663EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/01 12:0 a.m.5 views

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as HTML mail formats. A security vulnerability exists in Mozilla Thunderbird, which stems from the...

6.5CVSS7.6AI score0.00663EPSS
SaveExploits0References12
Veracode
Veracode
added 2020/09/21 6:38 a.m.20 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as the srcdoc content with an iframe has a sandbox attribute, fails to inherit the containing page's Content Security Policy CSP as it should unless the sandbox attribute included allow-same-origin...

9.8CVSS3.3AI score0.02306EPSS
SaveExploits1References4Affected Software2
NVD
NVD
added 2018/06/11 9:29 p.m.13 views

CVE-2017-7788

When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy CSP as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox 55...

9.8CVSS9AI score0.02306EPSS
SaveExploits1References4
OSV
OSV
added 2018/06/11 9:29 p.m.5 views

CVE-2017-7788

When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit the containing page's Content Security Policy CSP as it should unless the sandbox attribute included "allow-same-origin". This vulnerability affects Firefox 55...

9.8CVSS7.3AI score0.02306EPSS
SaveExploits1References4
Rows per page
Query Builder