Lucene search
+L

13279 matches found

CVE
CVE
•added 2021/06/02 4:31 p.m.•69 views

CVE-2011-3656

CVE-2011-3656 affects Mozilla Firefox up to version 3.6.24 and 4.x through 7, with a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via HTTP 0.9 error handling, non-default ports, and content-sniffing. The provided documents consistently describe t...

6.1CVSS5.9AI score0.00761EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/06/02 4:31 p.m.•3 views

CVE-2011-3656

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing...

6.1CVSS0.00761EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/02 12:00 a.m.•4 views

PT-2021-8350

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.24 Mozilla Firefox versions 4.x through 7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via specific vectors, including those involving HTTP 0....

6.1CVSS0.00761EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/02 12:00 a.m.•7 views

CVE-2011-3656: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing...

6.1CVSS5.9AI score0.00761EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•19 views

The vulnerability of the Exim message transfer agent, related to resource management errors, allows a attacker to perform denial-of-service attacks.

The vulnerability of the Exim message transfer agent is related to resource management errors. Exploiting this vulnerability allows a malicious actor to perform a Denial-of-Service attack by sending specially crafted data to the application...

7.5CVSS7.7AI score0.61664EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•17 views

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

7.8CVSS7.7AI score0.00407EPSS
SaveExploits3References16Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•17 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

8.5CVSS7AI score0.01812EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•21 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

6.4CVSS5.5AI score0.0124EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/06/01 12:00 a.m.•16 views

The vulnerability of the Cache Manager API of the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the Squid proxy server’s Cache Manager API component is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.5AI score0.04341EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/06/01 12:00 a.m.•14 views

The vulnerability of the Titanium CNC system, related to privilege management errors, allows a hacker to elevate their privileges within the system and execute arbitrary code.

The vulnerability of the Titanium CNC system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system and execute arbitrary code...

7.4CVSS5.8AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•21 views

UVI-2021-1000101 ext4: always panic when errors=panic is specified

ext4: always panic when errors=panic is specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•28 views

GSD-2021-1000101 ext4: always panic when errors=panic is specified

ext4: always panic when errors=panic is specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-28527

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and is...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•1 views

PT-2021-24574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and is...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-28568

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the ext4 file system, where the system always panics when the errors=panic option is specified. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•2 views

PT-2021-24533

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the ext4 file system in the Linux Kernel. When the errors=panic option is specified, the system will always panic. This behavior was introduced in version v5.11 and i...

5.8AI score
SaveExploits0References1
Veracode
Veracode
•added 2021/05/28 1:05 p.m.•33 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. Resource management errors via fftools/cmdutils.c results in a denial of service condition...

7.5CVSS4.4AI score0.01347EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/27 12:00 a.m.•16 views

PT-2021-7045 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

8.8CVSS7.9AI score0.01307EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2021/05/26 12:00 a.m.•18 views

The vulnerability of the GNTTABOP_map_grant component in Xen hypervisors allows a perpetrator to trigger a service failure.

The vulnerability of the GNTTABOPmapgrant component in Xen hypervisors is related to errors in returned values. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00527EPSS
SaveExploits1References7Affected Software4
Prion
Prion
•added 2021/05/25 7:15 p.m.•32 views

Denial of service

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c...

5CVSS7.4AI score0.01347EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder