Lucene search
+L

7 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 5:51 a.m.•10 views

SUSE CVE-2011-2984

Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly handle the dropping of a tab element, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by establishing a content area and registering...

10CVSS6.7AI score0.03591EPSS
SaveExploits1References7
Ubuntu
Ubuntu
•added 2022/12/15 7:08 a.m.•75 views

USN-5782-1: Firefox vulnerabilities

It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use this library to perform a reentrancy issue on Firefox. CVE-2022-46871 Nika Layzell discovered that Firefox was not performing a check on paste received from cross-processes. An attacker coul...

8.8CVSS8.2AI score0.00938EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/04/01 8:31 p.m.•38 views

CVE-2019-11698

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for...

6.1CVSS1.8AI score0.01354EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2019/07/23 2:15 p.m.•9 views

DEBIAN-CVE-2019-11698

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for...

5.3CVSS8.7AI score0.01354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/23 12:00 a.m.•7 views

CVE-2019-11698: Improper Input Validation

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for...

5.3CVSS8.1AI score0.01354EPSS
SaveExploits0References2
exploitpack
exploitpack
•added 2004/07/13 12:00 a.m.•29 views

Microsoft Outlook Express - Window Opener

Microsoft Outlook Express - Window Opener Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this vulnerability and we can still cause a drag and drop event. Well anyway, to the people that don't design easily exploited software, simply click the link on the...

7.4AI score
SaveExploits0
zdt
zdt
•added 2004/07/13 12:00 a.m.•36 views

MS Outlook Express Window Opener Vulnerability

Exploit for unknown platform in category remote exploits ============================================== MS Outlook Express Window Opener Vulnerability ============================================== Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this...

7.1AI score
SaveExploits0
Rows per page
Query Builder