Lucene search
+L

18 matches found

Redos
Redos
•added 2026/08/12 12:00 a.m.•13 views

ROS-20260812-73-0018

The vulnerability in dnsdist relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

4.3CVSS6.2AI score0.00161EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/06 12:00 a.m.•12 views

The vulnerability of the CORS component in Google Chrome and Microsoft Edge web browsers allows a hacker to access confidential data.

The vulnerability of the CORS component in Google Chrome and Microsoft Edge relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to access confidential data through a specially created HTML page...

5CVSS6.2AI score0.00231EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/08/05 12:00 a.m.•20 views

The vulnerability of the XML-RPC server used by Glances allows attackers to compromise the confidentiality of protected information.

The vulnerability of the XML-RPC server used by the Glances monitoring tool is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

7.8CVSS6.5AI score0.00475EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/06/15 12:00 a.m.•19 views

The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the Networking component of the Firefox browser and the Thunderbird email client is related to the use of an untrusted network policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS8.7AI score0.00452EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/05/25 12:00 a.m.•19 views

The vulnerability of the application software interface of the Glances monitoring tool arises from the use of an untrusted inter-domain policy file, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Glances monitoring tool is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

9.4CVSS5.8AI score0.00488EPSS
SaveExploits1References6Affected Software2
Redos
Redos
•added 2026/05/15 12:00 a.m.•27 views

ROS-20260515-73-0049

A vulnerability in the ChromeDriver component of Google Chrome for Android browser is related to the use of an untrusted cross-domain policy file. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions...

6.5CVSS6.7AI score0.00297EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/06 12:00 a.m.•17 views

The vulnerability of the ChromeDriver component of the Google Chrome browser, which allows a hacker to circumvent existing security restrictions

The vulnerability of the ChromeDriver component of the Google Chrome browser for Android is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

7.5CVSS7AI score0.00297EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/11/11 12:00 a.m.•10 views

The vulnerability of the Web page rendering module in the Safari browser of the WebKit framework in iOS operating systems and iPadOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Web page rendering module in Safari web browsers, operating systems iOS, and iPadOS relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

9.4CVSS7.3AI score0.00491EPSS
SaveExploits0References6Affected Software6
BDU FSTEC
BDU FSTEC
•added 2025/11/10 12:00 a.m.•6 views

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of an untrusted intermediate policy file during the processing of Canvas elements. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protecte...

5CVSS6.8AI score0.00504EPSS
SaveExploits0References6Affected Software3
Redos
Redos
•added 2025/09/22 12:00 a.m.•14 views

ROS-20250922-02

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect code generation control. code generation control. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code Vulnerability in Mozilla Firefox, Firefox ESR...

8.8CVSS7.3AI score0.00352EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/09/19 12:00 a.m.•11 views

The vulnerability in the Layout component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.

The vulnerability of the Layout component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS6.9AI score0.00302EPSS
SaveExploits0References20Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•13 views

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the integrity of protected information.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information...

5CVSS7.2AI score0.00256EPSS
SaveExploits0References25Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/01/23 12:00 a.m.•20 views

The vulnerability of the IBM DevOps Velocity lifecycle management platform (previously known as IBM UrbanCode Velocity) stems from the use of an untrusted inter-domain policy file. This allows attackers to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the IBM DevOps Velocity lifecycle management platform previously known as IBM UrbanCode Velocity is related to the use of an untrusted inter-domain policy file. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and...

5.3CVSS5.5AI score0.00361EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•19 views

The vulnerability of software for managing and securing environments on IBM Power Systems, IBM PowerSC, arises from the use of an untrusted interdomain policy file. This allows attackers to perform privileged actions and extract confidential information.

The vulnerability of the IBM PowerSC microprocessor architecture is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows attackers to perform privileged actions and extract confidential information...

5.3CVSS7.7AI score0.00456EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/16 12:00 a.m.•20 views

The vulnerability in the isolated iframe environment of Google Chrome allows a perpetrator to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerability in the isolated iframe environment of Google Chrome relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to protected information through a...

5CVSS5.4AI score0.00719EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/08/07 12:00 a.m.•17 views

The vulnerability of Google Chrome’s Intents function on Android allows a hacker to bypass existing security restrictions.

The vulnerability of Google Chrome’s Intents API for Android is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

7.8CVSS6.5AI score0.00568EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/08/02 12:00 a.m.•22 views

The vulnerability of the OffscreenCanvas function in Firefox and Firefox ESR browsers allows a hacker to execute arbitrary code.

The vulnerability of the OffscreenCanvas function in Firefox and Firefox ESR browsers is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.7AI score0.00594EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/09/14 12:00 a.m.•10 views

The vulnerability of the WPE WebKit web page rendering module, related to the use of an untrusted intermediate policy file, allows a attacker to compromise data integrity.

The vulnerability of the WPE WebKit web page rendering module is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.1CVSS6.5AI score0.01784EPSS
SaveExploits0References8Affected Software5
Rows per page
Query Builder