Lucene search
K

8 matches found

Cvelist
Cvelist
added 2024/10/29 12:19 p.m.15 views

CVE-2024-10474

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS 132...

0.00297EPSS
Exploits0References2
CVE
CVE
added 2024/10/29 12:19 p.m.47 views

CVE-2024-10474

The CVE-2024-10474 entry concerns Mozilla Focus for iOS (pre-132). The issue is that internal links could use the app scheme for deeplinking, potentially bypassing URL safety checks and enabling link spoofing. Connected sources confirm Focus for iOS

9.1CVSS6.7AI score0.00297EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/29 12:19 p.m.7 views

CVE-2024-10474

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS 132...

6.8AI score0.00297EPSS
Exploits0References2
Mozilla
Mozilla
added 2024/10/28 12:0 a.m.12 views

Security Vulnerabilities fixed in Focus for iOS 132 — Mozilla

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks...

9.1CVSS7AI score0.00297EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/02/15 11:15 p.m.9 views

CVE-2024-23674

The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...

9.6CVSS6.6AI score0.00057EPSS
Exploits0References4
Prion
Prion
added 2024/02/15 11:15 p.m.9 views

Authentication flaw

The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...

7.4AI score0.00057EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/02/15 12:0 a.m.8 views

CVE-2024-23674

The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...

7.2AI score0.00057EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/02/15 12:0 a.m.2 views

PT-2024-20011 · Unknown · Online-Ausweis-Funktion Eid

Name of the Vulnerable Software and Affected Versions: Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 Description: The issue allows authentication bypass by spoofing, enabling a man-in-the-middle attacker to assume a victim's identity and access...

9.6CVSS7AI score0.00057EPSS
Exploits0References7
Rows per page
Query Builder