Lucene search
+L

6979 matches found

RedHat Linux
RedHat Linux
•added 2024/06/20 6:02 a.m.•22 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/20 5:52 a.m.•13 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/20 5:42 a.m.•14 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/18 6:22 a.m.•16 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 3:23 p.m.•14 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 2:02 p.m.•12 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 1:49 p.m.•16 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 1:39 p.m.•12 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 1:21 p.m.•21 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 1:19 p.m.•17 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 1:16 p.m.•18 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2024/06/17 1:08 p.m.•16 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
NVD
NVD
•added 2024/06/16 1:15 a.m.•60 views

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

9.8CVSS0.01484EPSS
SaveExploits1References5
CVE
CVE
•added 2024/06/16 12:00 a.m.•73 views

CVE-2024-38395

In iTerm2 versions prior to 3.5.2 , the "Terminal may report window title" setting is not honored, which could potentially lead to remote code execution . Although the vulnerability is noted as not trivially exploitable , it poses a significant security risk. To remediate this issue, users should...

9.8CVSS7.9AI score0.01484EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2024/06/16 12:00 a.m.•28 views

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

9.8CVSS8.1AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/06/16 12:00 a.m.•31 views

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

8.1AI score0.01484EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/06/16 12:00 a.m.•48 views

CVE-2024-38395

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

0.01484EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/16 12:00 a.m.•9 views

CVE-2024-38395: Improper Control of Generation of Code

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."...

9.8CVSS6.2AI score0.01484EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/16 12:00 a.m.•19 views

iTerm2 Security Vulnerability

iTerm2 is a terminal emulation program written for Mac OS X. A security vulnerability in iTerm2 version 3.5.x prior to 3.5.2, which originates from the unfiltered use of escape sequences to report window titles, allows an attacker to inject arbitrary code into the terminal...

9.8CVSS7.2AI score0.01683EPSS
SaveExploits2References4
Mageia
Mageia
•added 2024/06/14 5:30 p.m.•63 views

Updated vte packages fix security vulnerability

GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resize escape sequence, a related issue to CVE-2000-0476. CVE-2024-37535...

4.4CVSS7.2AI score0.00238EPSS
SaveExploits0References3
Rows per page
Query Builder