Lucene search
+L

20 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:47 p.m.•24 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS6.2AI score0.00384EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/05/18 9:31 p.m.•29 views

Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS6.2AI score0.00384EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2026/05/18 9:31 p.m.•21 views

GHSA-67GQ-6Q8C-QQH6 Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS6.2AI score0.00384EPSS
SaveExploits1References7
NVD
NVD
•added 2026/05/18 8:16 p.m.•31 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00384EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/05/18 6:57 p.m.•57 views

CVE-2026-45244 Summarize < 0.15.1 Unapproved Browser Automation Execution

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00384EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/05/18 6:57 p.m.•15 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS6.2AI score0.00384EPSS
SaveExploits1References5
CVE
CVE
•added 2026/05/18 6:57 p.m.•89 views

CVE-2026-45244

CVE-2026-45244 affects the Summarize extension prior to version 0.15.1 . The vulnerability is a missing authorization flaw that lets attackers execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent via ...

5.4CVSS6.2AI score0.00384EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/05/18 6:57 p.m.•49 views

EUVD-2026-30796

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS6.2AI score0.00384EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/05/18 12:00 a.m.•44 views

PT-2026-41723

Name of the Vulnerable Software and Affected Versions Summarize versions prior to 0.15.1 Description A missing authorization issue allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. By using malicious page or...

5.4CVSS6.1AI score0.00384EPSS
SaveExploits1References14
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•34 views

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•29 views

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2009/06/19 4:00 p.m.•42 views

CVE-2009-0961

The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger a...

6.3AI score0.06384EPSS
SaveExploits3References6
CVE
CVE
•added 2009/06/19 4:00 p.m.•78 views

CVE-2009-0961

The CVE-2009-0961 issue affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The Mail component could dismiss the call-approval dialog when another alert appears, potentially allowing a remote attacker to place a call without user approval by triggering an alert. The connecte...

5CVSS6.4AI score0.06384EPSS
SaveExploits3References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/06/19 12:00 a.m.•10 views

CVE-2009-0961: Undefined Security Weakness

The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger a...

5CVSS5.8AI score0.06384EPSS
SaveExploits3References1
exploitpack
exploitpack
•added 2009/05/17 12:00 a.m.•21 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (1)

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass 1 source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/17 12:00 a.m.•19 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (3)

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass 3 source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/17 12:00 a.m.•18 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (2)

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass 2 source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's...

SaveExploits0
Exploit DB
Exploit DB
•added 2009/05/17 12:00 a.m.•37 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (3)

source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a...

5CVSS5.8AI score0.06384EPSS
SaveExploits3
Exploit DB
Exploit DB
•added 2009/05/17 12:00 a.m.•34 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (2)

source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a...

5CVSS5.8AI score0.06384EPSS
SaveExploits3
Rows per page
Query Builder