Lucene search
+L

2960 matches found

OSV
OSV
•added 2021/01/28 8:15 p.m.•16 views

CVE-2020-35754

OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...

7.2CVSS7.2AI score0.10458EPSS
SaveExploits3References4
Prion
Prion
•added 2021/01/28 8:15 p.m.•23 views

Code injection

OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...

6.5CVSS7.1AI score0.10458EPSS
SaveExploits3References4Affected Software2
Cvelist
Cvelist
•added 2021/01/28 7:26 p.m.•31 views

CVE-2020-35754

OpenSolution Quick.CMS 6.7 and Quick.Cart 6.7 allow an authenticated user to perform code injection and consequently Remote Code Execution via the input fields of the Language tab...

7.2AI score0.10458EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2021/01/28 12:00 a.m.•16 views

Opensolution Quick.Cart and Opensolution Quick.Cms Injection Vulnerabilities

Opensolution Quick.Cart and Opensolution Quick.Cms are both products of Opensolution Poland.Opensolution Quick.Cart is a website builder for building shopping cart platforms.Opensolution Quick.Cms is a website builder for building text management platforms. Cms is a website builder for building...

7.2CVSS7.2AI score0.10458EPSS
SaveExploits3References8
OSV
OSV
•added 2021/01/26 9:15 p.m.•35 views

CVE-2021-26271

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs in the Advanced Tab for Dialogs plugin...

6.5CVSS6.9AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/01/26 9:15 p.m.•41 views

CVE-2021-26271

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs in the Advanced Tab for Dialogs plugin...

6.5CVSS7AI score0.0197EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/01/26 8:39 p.m.•39 views

CVE-2021-26271

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs in the Advanced Tab for Dialogs plugin...

6.5CVSS7AI score0.0197EPSS
SaveExploits0
OSV
OSV
•added 2021/01/26 12:00 a.m.•23 views

UBUNTU-CVE-2021-23958

The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox 85...

6.5CVSS6.8AI score0.00877EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•17 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 85. The browser could be confused to transfer the pointer-locked state to another tab, which could be exploited by an attacker to...

6.1CVSS7.3AI score0.00657EPSS
SaveExploits0References8
OSV
OSV
•added 2021/01/26 12:00 a.m.•31 views

UBUNTU-CVE-2021-23955

The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox 85...

6.1CVSS6.7AI score0.00657EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/01/13 12:00 a.m.•17 views

Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-04655)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox for Android prior to version 84. By attempting to connect to a website using a port that fails to respond, an attacker can control the content of tabs...

6.5CVSS8.7AI score0.00851EPSS
SaveExploits0References1
OSV
OSV
•added 2021/01/07 2:15 p.m.•9 views

CVE-2020-26977

By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 84...

6.5CVSS7.1AI score0.00851EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/01/07 2:15 p.m.•33 views

CVE-2020-26977

By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 84...

6.5CVSS6.9AI score0.00851EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/01/07 1:51 p.m.•48 views

CVE-2020-26977

By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 84...

6.5CVSS8.1AI score0.00851EPSS
SaveExploits0
Prion
Prion
•added 2020/12/24 6:15 p.m.•35 views

Code injection

On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy BLE device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offer...

5.4CVSS8.3AI score0.00451EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
•added 2020/12/21 6:51 p.m.•29 views

Authorization Bypass

chromium is vulnerable to authorization bypass. The vulnerability exists through an incorrect security UI issue found in the tab preview component of the chromium browser...

4.3CVSS3.3AI score0.00687EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2020/12/15 12:00 a.m.•16 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox for Android prior to version 84. By attempting to connect to a website using a port that fails to respond, an attacker can control the content of tabs...

6.5CVSS6.9AI score0.00851EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
•added 2020/12/14 12:00 a.m.•12 views

VulnCheck KEV: CVE-2020-17496

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759...

9.8CVSS8.6AI score0.8774EPSS
SaveIn wildExploits1References906
BDU FSTEC
BDU FSTEC
•added 2020/12/11 12:00 a.m.•12 views

The vulnerability of the preview function of Google Chrome tabs, which allows attackers to perform spear-phishing attacks

The vulnerability of the preview function in Google Chrome browsers is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a malicious actor to perform spoofing attacks remotely...

6.4CVSS6.7AI score0.00687EPSS
SaveExploits1References11Affected Software6
OSV
OSV
•added 2020/12/08 2:15 p.m.•9 views

CVE-2020-25955

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...

5.4CVSS6AI score0.0094EPSS
SaveExploits2References4
Rows per page
Query Builder