Lucene search
+L

266444 matches found

Patchstack
Patchstack
•added 2024/10/14 11:33 a.m.•15 views

WordPress Ahmeti Wp Timeline plugin <= 5.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Ahmeti Wp Timeline versions = 5.1...

7.1CVSS6.2AI score0.0017EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2024/10/14 1:50 a.m.•36 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.6AI score0.23184EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2024/10/14 1:44 a.m.•24 views

firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)

A remote code execution vulnerability was found in Firefox and Thunderbird. The Mozilla Foundation Security Advisories state: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines...

9.8CVSS7.9AI score0.23184EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2024/10/14 1:32 a.m.•10 views

firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)

A remote code execution vulnerability was found in Firefox and Thunderbird. The Mozilla Foundation Security Advisories state: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines...

9.8CVSS7.9AI score0.23184EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2024/10/14 1:23 a.m.•13 views

firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)

A remote code execution vulnerability was found in Firefox and Thunderbird. The Mozilla Foundation Security Advisories state: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines...

9.8CVSS7.9AI score0.23184EPSS
SaveExploits1References7
Patchstack
Patchstack
•added 2024/10/14 12:00 a.m.•25 views

WordPress Ahmeti Wp Timeline Plugin <= 5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ahmeti Wp Timeline Type Plugin Vulnerable versions = 5.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49237 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 0541f9ea1e83 Credits SOPROBRO Required...

7.1CVSS6.6AI score0.0017EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•30 views

RHEL 9 : firefox (RHSA-2024:8031)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8031 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-fr...

9.8CVSS8.7AI score0.23184EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•16 views

RHEL 8 : firefox (RHSA-2024:8033)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8033 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-fr...

9.8CVSS8.7AI score0.23184EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•19 views

RHEL 9 : thunderbird (RHSA-2024:8025)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8025 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill...

9.8CVSS8.7AI score0.23184EPSS
SaveExploits1References4
OSV
OSV
•added 2024/10/14 12:00 a.m.•21 views

ALSA-2024:8025 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

9.8CVSS10AI score0.23184EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•21 views

RHEL 8 : thunderbird (RHSA-2024:8030)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8030 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill...

9.8CVSS8.7AI score0.23184EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•24 views

RHEL 8 : thunderbird (RHSA-2024:8024)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8024 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill...

9.8CVSS8.7AI score0.23184EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2024/10/14 12:00 a.m.•31 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

9.8CVSS7.2AI score0.23184EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/12 6:48 p.m.•7 views

Malicious code in timeline-airtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82972946c40c712d890ca81684f6f8e6cf2215c45c13f10665f22be10ee7f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/10/10 12:00 a.m.•13 views

Slackware: Security Advisory (SSA:2024-283-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS10AI score0.23184EPSS
SaveExploits1References7
OSV
OSV
•added 2024/10/10 12:00 a.m.•22 views

ALSA-2024:7958 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 For more details about the security issues, including the impact, a CVSS score,...

9.8CVSS10AI score0.23184EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/10/10 12:00 a.m.•29 views

RHEL 8 : firefox (RHSA-2024:7977)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7977 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-fr...

9.8CVSS8.7AI score0.23184EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2024/10/10 12:00 a.m.•27 views

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 For more details about the security issues, including the impact, a CVSS score,...

9.8CVSS7.2AI score0.23184EPSS
SaveExploits1References4
Slackware Linux
Slackware Linux
•added 2024/10/09 9:27 p.m.•33 views

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.16.1esr-i686-1slack15.0.txz: Upgraded. This update contains a critical security fix: Use-after-free in...

9.8CVSS7.6AI score0.23184EPSS
SaveExploits1
Circl
Circl
•added 2024/10/09 7:50 p.m.•38 views

CVE-2024-9463

creationtimestamp| type| source ---|---|--- 2024-10-09 19:50:30+00:00| seen| https://t.me/cvedetector/7514 2024-10-10 12:00:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus24/2024 2024-10-10 13:17:11+00:00| published-proof-of-concept| https://t.me/truesecator/6304 2024-10-1...

9.9CVSS8.5AI score0.98546EPSS
SaveIn wildExploits0References14
Rows per page
Query Builder