Lucene search
+L

3446 matches found

RedHat Linux
RedHat Linux
•added 2024/11/04 2:03 a.m.•22 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•18 views

Gradio 安全漏洞

Gradio, an open source Python library from Gradio Open Source, is a way to demonstrate machine learning models through a friendly web interface. A security vulnerability exists in Gradio version 4.42.0, which stems from the gr.DownloadButton function containing a server-side request forgery...

6.5CVSS6.5AI score0.0047EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/11/04 12:00 a.m.•21 views

PT-2024-32971

Name of the Vulnerable Software and Affected Versions gradio versions 4.42.0 and earlier Description The issue is related to a hidden server-side request forgery SSRF vulnerability in the gr.DownloadButton function. This vulnerability arises because the save url to cache function does not restric...

6.5CVSS5.9AI score0.0047EPSS
SaveExploits1References12
RedHat Linux
RedHat Linux
•added 2024/10/31 8:14 p.m.•17 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 8:05 p.m.•18 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 8:02 p.m.•22 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 7:53 p.m.•17 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 7:48 p.m.•20 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 7:34 p.m.•17 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 7:28 p.m.•21 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/31 7:23 p.m.•11 views

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

7.5CVSS7.3AI score0.00565EPSS
SaveExploits0References9
OSV
OSV
•added 2024/10/30 6:15 p.m.•10 views

CVE-2024-31975

EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button...

4.8CVSS5.8AI score0.00379EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/29 2:15 p.m.•16 views

CVE-2024-9505

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

5.4CVSS6AI score0.00349EPSS
SaveExploits0References4
NVD
NVD
•added 2024/10/29 2:15 p.m.•41 views

CVE-2024-9505

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

6.4CVSS0.00349EPSS
SaveExploits0References4
CVE
CVE
•added 2024/10/29 1:53 p.m.•88 views

CVE-2024-9505

CVE-2024-9505 affects Beaver Builder – WordPress Page Builder (Plugin). The issue is a stored DOM-based XSS in the Button widget introduced by insufficient input sanitization and output escaping on user-supplied attributes, exploitable by authenticated attackers with contributor-level access and ...

6.4CVSS5.4AI score0.00349EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/10/29 1:15 p.m.•25 views

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

6.5CVSS6.7AI score
SaveExploits0References7
NVD
NVD
•added 2024/10/29 1:15 p.m.•18 views

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

7.5CVSS0.00565EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2024/10/29 12:19 p.m.•23 views

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

7.5CVSS6.4AI score0.00565EPSS
SaveExploits0
NVD
NVD
•added 2024/10/29 9:15 a.m.•41 views

CVE-2024-50414

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buttonizer Button contact VR button-contact-vr allows Stored XSS.This issue affects Button contact VR: from n/a through = 4.7.9.1...

5.9CVSS0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/29 8:47 a.m.•15 views

CVE-2024-50414 WordPress Button contact VR plugin <= 4.7.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buttonizer Button contact VR button-contact-vr allows Stored XSS.This issue affects Button contact VR: from n/a through = 4.7.9.1...

5.9CVSS5.9AI score0.00311EPSS
SaveExploits0References1
Rows per page
Query Builder