Lucene search
K

2673 matches found

RedHat Linux
RedHat Linux
added 2024/11/04 2:3 a.m.6 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.2 views

Gradio 安全漏洞

Gradio, an open source Python library from Gradio Open Source, is a way to demonstrate machine learning models through a friendly web interface. A security vulnerability exists in Gradio version 4.42.0, which stems from the gr.DownloadButton function containing a server-side request forgery...

6.5CVSS6.5AI score0.00464EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.3 views

PT-2024-32971 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: gradio versions 4.42.0 and earlier Description: The issue is related to a hidden server-side request forgery SSRF vulnerability in the gr.DownloadButton function. This vulnerability arises because the save url to cache function does not...

6.5CVSS6.7AI score0.00464EPSS
Exploits1References9
RedHat Linux
RedHat Linux
added 2024/10/31 8:14 p.m.1 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 8:5 p.m.3 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 8:2 p.m.3 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 7:53 p.m.1 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 7:48 p.m.3 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 7:34 p.m.1 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 7:28 p.m.4 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/10/31 7:23 p.m.4 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00545EPSS
Exploits0References9
OSV
OSV
added 2024/10/30 6:15 p.m.2 views

CVE-2024-31975

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button...

4.8CVSS5.8AI score0.00348EPSS
Exploits0References1
OSV
OSV
added 2024/10/29 2:15 p.m.2 views

CVE-2024-9505

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

5.4CVSS6AI score0.0032EPSS
Exploits0References4
NVD
NVD
added 2024/10/29 2:15 p.m.28 views

CVE-2024-9505

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

6.4CVSS0.0032EPSS
Exploits0References4
CVE
CVE
added 2024/10/29 1:53 p.m.57 views

CVE-2024-9505

CVE-2024-9505 affects Beaver Builder – WordPress Page Builder (Plugin). The issue is a stored DOM-based XSS in the Button widget introduced by insufficient input sanitization and output escaping on user-supplied attributes, exploitable by authenticated attackers with contributor-level access and ...

6.4CVSS5.4AI score0.0032EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/10/29 1:15 p.m.10 views

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

6.5CVSS6.7AI score
Exploits0References7
NVD
NVD
added 2024/10/29 1:15 p.m.7 views

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

7.5CVSS0.00545EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2024/10/29 12:19 p.m.11 views

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

7.5CVSS6.4AI score0.00545EPSS
Exploits0
NVD
NVD
added 2024/10/29 9:15 a.m.8 views

CVE-2024-50414

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buttonizer Button contact VR button-contact-vr allows Stored XSS.This issue affects Button contact VR: from n/a through = 4.7.9.1...

5.9CVSS0.00284EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 8:47 a.m.8 views

CVE-2024-50414 WordPress Button contact VR plugin <= 4.7.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buttonizer Button contact VR button-contact-vr allows Stored XSS.This issue affects Button contact VR: from n/a through = 4.7.9.1...

5.9CVSS5.9AI score0.00284EPSS
Exploits0References1
Rows per page
Query Builder