36 matches found
sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation
A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...
Astra Linux – Vulnerability in Firefox
Search queries in the default search engine might appear to be the currently navigated URL, provided that the search query itself is a properly formed URL. This could lead to a site spoofing another site, if it was maliciously set as the default search engine. This vulnerability affects Firefox...
PT-2026-8091
@VulmonFeeds 🚨 CVE-2025-27573 has been marked as Rejected in the official CVE List. This means it does not qualify as a valid vulnerability entry, though it remains stored in the NVD database without appearing in default search results. CVE CyberSecurity...
Linux Distros Unpatched Vulnerability : CVE-2023-4579
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could...
CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
CVE-2021-22905
Nextcloud Android App com.nextcloud.client before v3.16.0 is vulnerable to information disclosure due to searches for sharees being performed by default on the lookup server instead of only using the local Nextcloud server unless a global search has been explicitly chosen by the user...
CVE-2024-22551
WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...
Usha InformatiqueC WhatACart Cross-Site Scripting Vulnerability
Usha InformatiqueC WhatACart is an open source online e-commerce solution from Usha InformatiqueC built on the Yii2 framework. A cross-site scripting vulnerability exists in Usha InformatiqueC WhatACart version v2.0.7, which stems from cross-site scripting contained in the component...
CVE-2024-22551
WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...
PT-2024-19484 · Whatacart · Whatacart
Name of the Vulnerable Software and Affected Versions: WhatACart version 2.0.7 Description: A reflected cross-site scripting XSS issue was discovered in WhatACart via the /site/default/search component. This allows for potential malicious script injection and execution. Recommendations: For...
SUSE CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
Spoofing
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
URL Spoofing Via Default Search Engine
Firefox is vulnerable to URL Spoofing via Default Search Engine. The default search engine in the web browser can display search queries as if they were the current URL when the query resembles a well-formed URL. This behavior might allow a malicious site, if set as the default search engine, to...
CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which stems from the fact that a search query in the default search engine may appear to be the URL of the current navigation if the search query...
UBUNTU-CVE-2023-4579
Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could have led to a site spoofing another if it had been maliciously set as the default search engine. This vulnerability affects Firefox 117...