Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:33 p.m.22 views

CVE-2026-45245

Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthines...

7.4CVSS5.4AI score0.0033EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/05/18 7:00 p.m.9 views

CVE-2026-45245 Summarize < 0.15.1 Unauthorized Daemon Request via Untrusted Events

Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthines...

7.4CVSS5.8AI score0.0033EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/05/18 7:00 p.m.21 views

CVE-2026-45245

Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthines...

7.4CVSS5.8AI score0.0033EPSS
SaveExploits1References5
CVE
CVE
added 2026/05/18 7:00 p.m.66 views

CVE-2026-45245

CVE-2026-45245 affects the Summarize extension prior to 0.15.1. A vulnerability in the hover summary feature lets malicious pages dispatch synthetic mouseover events on attacker‑controlled links, causing the extension to issue authenticated daemon requests using stored tokens without verifying ev...

7.4CVSS5.8AI score0.0033EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2024/11/12 12:00 a.m.8 views

Synology DiskStation Manager (DSM) File Disclosure Vulnerability (Synology-SA-24:20) - Remote Known Vulnerable Versions Check

Synology DiskStation Manager DSM is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS6.7AI score0.27787EPSS
SaveExploits0References3
Rows per page
Query Builder