Lucene search
+L

155 matches found

Citrix
Citrix
added 2022/04/08 12:00 a.m.30 views

Web Extension Required error when launching resources via HTML5 mode

You are not able to launch resources apps or desktops from browser due to a lack of web extension. If you see this modal dialog and are not able to launch application protected resource...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/02/15 10:56 a.m.14 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:41 a.m.14 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:37 a.m.11 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/02/15 10:20 a.m.10 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/02/14 9:15 a.m.12 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/02/14 8:46 a.m.13 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/02/14 8:34 a.m.18 views

Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages

The Mozilla Foundation Security Advisory describes this flaw as: Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy...

8.8CVSS7.3AI score0.00743EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/02/09 12:00 a.m.38 views

CVE-2022-22761

Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

8.8CVSS6.8AI score0.00743EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/09 12:00 a.m.8 views

UBUNTU-CVE-2022-22761

Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

8.8CVSS6.8AI score0.00743EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2022/01/13 6:50 a.m.29 views

CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This...

7.5CVSS4.8AI score0.00807EPSS
SaveExploits0References4
Veracode
Veracode
added 2021/12/14 7:27 p.m.21 views

Information Disclosure

firefox:sid is vulnerable to information disclosure. Remote attackers are able to access the post-redirect URL of the element clicked resulting in a same-origin-violation leaking data, the Web Extension should have access to...

4.3CVSS4AI score0.00329EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/12/12 12:00 a.m.86 views

Mozilla Firefox Access Control Error Vulnerability (CNVD-2021-99623)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has an access control error vulnerability that originates when the Web extension directory is reloaded and the application fails to prevent the Web extension from accessing the redirected URL of the click...

4.3CVSS2.2AI score0.00329EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/08 10:15 p.m.16 views

CVE-2021-43531

When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should...

4.3CVSS0.00329EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/08 10:15 p.m.30 views

Design/Logic Flaw

When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should...

4.3CVSS4.4AI score0.00528EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/08 9:20 p.m.45 views

CVE-2021-43531

When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should...

4.9AI score0.00329EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/12/08 9:20 p.m.74 views

CVE-2021-43531

When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should...

4.3CVSS4.4AI score0.00329EPSS
SaveExploits0
CVE
CVE
added 2021/12/08 9:20 p.m.101 views

CVE-2021-43531

CVE-2021-43531 affects Firefox prior to version 94. The issue arises when a Web Extension loads a context menu and could access the post-redirect URL of the clicked element if it lacked WebRequest permissions for the involved hosts, causing a same-origin-violation that leaks data the extension wo...

4.3CVSS4.4AI score0.00329EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/12/08 12:00 a.m.13 views

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has an access control error vulnerability that originates when the Web extension directory is reloaded and the application fails to prevent the Web extension from accessing the redirected URL of the click...

4.3CVSS5.7AI score0.00329EPSS
SaveExploits0References3
Gitee
Gitee
added 2021/10/16 11:59 p.m.7 views

HackTools

This is a web browser extension for penetration testing, called HackTools. It is a comprehensive toolset for web application security testing, providing various features such as: Dynamic shell generation PHP, Bash, Ruby, Python, Perl, Netcat XSS payload generation Common SQL injection payloads...

8.2AI score
SaveExploits0
Rows per page
Query Builder