490 matches found
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
Fullscreen Notification Obscuring
Firefox and Thunderbird are vulnerable to Fullscreen Notification Obscuring. The vulnerability is due to a website being able to obscure the fullscreen notification by using a dropdown select input element. This could lead to user confusion and possible spoofing attacks in Firefox and Thunderbird...
CVE-2024-1548
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
SUSE CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
DEBIAN-CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
UBUNTU-CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
Design/Logic Flaw
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
CVE-2024-1548
The Firefox browser and Thunderbird email client are vulnerable to a flaw where a website can use a dropdown select input element to obscure a fullscreen notification . This vulnerability could lead to user confusion and potential spoofing attacks . The affected versions include Firefox < 123 ...
CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
PT-2024-1861
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 123 Firefox ESR versions prior to 115.8 Thunderbird versions prior to 115.8 Description The issue is related to errors in the representation of information by the user interface, which could lead to user confusion and...
CVE-2024-1548: Undefined Security Weakness
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
CVE-2023-0389 Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields
The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...
MAL-2023-8623 Malicious code in simple-autocomplete-dropdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae96f59d7d614e3321cbab4516936e0500129be54888468ac309eaf1ad2269ed The OpenSSF Package Analysis project identified 'simple-autocomplete-dropdown' @ 3.7.14 npm as malicious. It is considered malicious because: -...
Malicious code in simple-autocomplete-dropdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae96f59d7d614e3321cbab4516936e0500129be54888468ac309eaf1ad2269ed The OpenSSF Package Analysis project identified 'simple-autocomplete-dropdown' @ 3.7.14 npm as malicious. It is considered malicious because: -...
MAL-2023-8622 Malicious code in dropdown-input (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d336f300d1cbb10697762ccb19e2efa75d88c7a9f180ca4e472b6861b6d5ca0 The OpenSSF Package Analysis project identified 'dropdown-input' @ 3.4.15 npm as malicious. It is considered malicious because: - The package...
Malicious code in dropdown-input (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d336f300d1cbb10697762ccb19e2efa75d88c7a9f180ca4e472b6861b6d5ca0 The OpenSSF Package Analysis project identified 'dropdown-input' @ 3.4.15 npm as malicious. It is considered malicious because: - The package...