PT-2022-10351

Name of the Vulnerable Software and Affected Versions Apache Hive versions prior to 3.1.3 Description The issue arises from the lack of necessary authorization checks for involved entities in the query during CREATE and DROP function operations. This allows an unauthorized user to manipulate an...

CVE-2021-34538: Missing Authentication for Critical Function

Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged...

Mozilla Firefox Security Advisory (MFSA2022-24) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

USN-5504-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass CSP restrictions, bypass sandboxed iframe restrictions, obtain sensitive...

UBUNTU-CVE-2022-34483

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

UBUNTU-CVE-2022-34482

An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tricked the user into executing malicious code. While very similar, this is a separate issue from...

[SECURITY] Fedora 36 Update: golang-storj-drpc-0.0.31-2.fc36

Lightweight, drop-in replacement for gRPC...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension and potentially tricked the user into executing malicious code...

Remote Code Execution (RCE)

firefox is vulnerable to remote code execution. The vulnerability exists because the drag and drop of malicious images could have led to malicious executable and potential code execution...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2023-68216)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. The input validation error vulnerability exists in Mozilla Firefox due to a lack of restriction and filtering of extensions in the drag-and-drop image feature. The vulnerability can be exploited to...

Mozilla Firefox Remote Code Execution Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A remote code execution vulnerability exists in Mozilla Firefox due to a lack of restriction and filtering of extensions in the drag-and-drop image feature. The vulnerability can be exploited to execut...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A remote code execution vulnerability exists in Mozilla Firefox due to a lack of restriction and filtering of extensions in the drag-and-drop image feature. The vulnerability can be exploited to execut...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. The input validation error vulnerability exists in Mozilla Firefox due to a lack of restriction and filtering of extensions in the drag-and-drop image feature. The vulnerability can be exploited to...

Security Vulnerabilities fixed in Firefox 102 — Mozilla

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Linux. Other operating systems are unaffected. Session history navigations may...

PT-2022-7089

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 102 Description The issue is related to insufficient warnings about dangerous actions in Mozilla Firefox. An attacker could exploit this by manipulating a filename to contain an executable extension when a use...

PT-2022-7104

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 102 Description The issue is related to insufficient warnings about dangerous actions in Mozilla Firefox. An attacker could exploit this by manipulating a filename to contain an executable extension when a use...

MAL-2022-877 Malicious code in adyen-web-drop-in-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50407732a88b3180b0f5c503247688cb6507f9badeee6d4591e0689d946e160e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20063

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgradi...

CVE-2017-20063

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgradi...

Elefant CMS 代码问题漏洞

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which stems from unknown functionality in file/filemanager/upload/drop for component file uploads. A remote...