6501 matches found
CVE-2024-11701
The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 133 and Thunderbird 133...
CVE-2024-11701
The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 133 and Thunderbird 133...
CVE-2024-11701
CVE-2024-11701 affects Mozilla Firefox and Mozilla Thunderbird. The issue is an incorrect domain being displayed in the address bar during interrupted navigation, which could enable spoofing attacks. Affected versions are Firefox < 133 and Thunderbird
Mozilla Firefox Security Advisory (MFSA2024-63) - Linux
The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2024-63. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Mozilla Thunderbird < 133.0
The version of Thunderbird installed on the remote Windows host is prior to 133.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-67 advisory. - A double-free issue could have occurred in secpkcs7decoderstartdecrypt when handling an error path. Under specific...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which stems from the fact that under certain circumstances, navigating to a web page can result in a missing address in the location URL bar. No...
Mozilla Firefox < 133.0
The version of Firefox installed on the remote Windows host is prior to 133.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-63 advisory. - A double-free issue could have occurred in secpkcs7decoderstartdecrypt when handling an error path. Under specific...
PT-2024-10064
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 133 Thunderbird versions prior to 133 Description The vulnerability is related to the incorrect display of a domain in the address bar during an interrupted navigation attempt, potentially leading to user confusion an...
PT-2024-9178 · Mozilla · Firefox For Ios
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 133 Description: The issue arises under certain circumstances when navigating to a webpage, resulting in the address missing from the location URL bar. This makes it unclear what the URL is for the loaded...
[SECURITY] [DLA 3961-1] webkit2gtk security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3961-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 22, 2024 https://wiki.debian.org/LTS -...
Debian dla-3961 : gir1.2-javascriptcoregtk-4.0 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3961 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3961-1 [email protected]...
WordPress StreamWeasels Online Status Bar plugin <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin StreamWeasels Online Status Bar versions = 2.1.9...
WordPress Pure CSS Circle Progress bar plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Pure CSS Circle Progress Bar versions = 1.2...
CVE-2024-11385
The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'circleprogress' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2024-11438 StreamWeasels Online Status Bar <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
The StreamWeasels Online Status Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sw-status-bar' shortcode in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...
CVE-2024-11385 Pure CSS Circle Progress bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'circleprogress' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
WordPress StreamWeasels Online Status Bar Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)
Software StreamWeasels Online Status Bar Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.1.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11438 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8a75c1958227 Credits Peter...
WordPress Pure CSS Circle Progress Bar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Pure CSS Circle Progress Bar Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11385 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92b64818bcc8 Credits SOPROBRO...
WordPress plugin Pure CSS Circle Progress bar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...