Lucene search
+L

21012 matches found

CNNVD
CNNVD
•added 2022/03/06 12:00 a.m.•15 views

F-Secure SAFE 跨站脚本漏洞

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to a cross-site scripting vulnerability that can be exploited by attackers to cause arbitrary code execution...

9.6CVSS5.7AI score0.00817EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/06 12:00 a.m.•4 views

PT-2022-12220

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser protection affected versions not specified Description A vulnerability was discovered in F-Secure SAFE browser protection due to improper URL handling, which can be triggered to cause universal cross-site scripting throug...

9.6CVSS0.00817EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/03/06 12:00 a.m.•19 views

F-secure F-Secure SAFE 跨站脚本漏洞

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to cross-site scripting, which can be exploited by attackers to remotely execute JavaScript and trigger generic cross-site scripting through the brows...

6.1CVSS5.2AI score0.00546EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•6 views

CVE-2021-44749: Improper Neutralization of Input During Web Page Generation

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...

9.6CVSS8.6AI score0.00817EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•6 views

CVE-2021-44748: Improper Neutralization of Input During Web Page Generation

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

6.1CVSS6.4AI score0.00546EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/06 12:00 a.m.•4 views

PT-2022-12219

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser affected versions not specified Description A vulnerability was discovered in the F-Secure SAFE browser where it automatically loads images, allowing an attacker to remotely execute JavaScript and trigger universal...

6.1CVSS0.00546EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/03/01 12:15 p.m.•10 views

CVE-2021-44747

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

6.5CVSS6.5AI score0.00634EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/01 12:15 p.m.•32 views

CVE-2021-44747

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

6.5CVSS0.00634EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/01 12:15 p.m.•35 views

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

4.3CVSS6.4AI score0.00634EPSS
SaveExploits0References1Affected Software5
CVE
CVE
•added 2022/03/01 11:55 a.m.•125 views

CVE-2021-44747

CVE-2021-44747: A DoS vulnerability in F-Secure Linux Security targets the Fmlib component. The vulnerability can crash while scanning fuzzed files and can be triggered remotely, causing denial of service to the Anti-Virus engine. Affected outcome is a partial availability impact for the AV compo...

6.5CVSS5.5AI score0.00634EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
•added 2022/03/01 11:55 a.m.•41 views

CVE-2021-44747 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

4.6CVSS6.6AI score0.00634EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•5 views

PT-2022-12218

Name of the Vulnerable Software and Affected Versions F-Secure Linux Security affected versions not specified Description A Denial-of-Service DoS issue was discovered in the Fmlib component used in certain F-Secure products, which can crash while scanning fuzzed files. The exploit can be triggere...

6.5CVSS0.00634EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/01 12:00 a.m.•8 views

CVE-2021-44747: Undefined Security Weakness

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the...

6.5CVSS6.5AI score0.00634EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/28 12:00 a.m.•4 views

PT-2022-17277

Name of the Vulnerable Software and Affected Versions Maxsite CMS version 108 Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the f tags parameter at the "/admin/page edit/3" API endpoint. Recommendations For Maxsite CMS...

5.4CVSS0.00493EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/02/28 12:00 a.m.•6 views

PT-2022-17274

Name of the Vulnerable Software and Affected Versions Maxsite CMS version v180 Description A stored cross-site scripting XSS issue was found in Maxsite CMS. The vulnerability is exploited via the f file description parameter at the "/admin/files" API endpoint. This allows for malicious scripts to...

5.4CVSS0.00493EPSS
SaveExploits1References7
Openbugbounty
Openbugbounty
•added 2022/02/27 5:49 p.m.•16 views

safeavenue.f-secure.com Cross Site Scripting vulnerability OBB-2386113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•1 views

PT-2022-28889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.4 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential for...

5.7AI score
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2022/02/23 8:00 a.m.•14 views

In zsh before 5.8.1 an attacker can achieve code execution if they control a command output inside the prompt as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion.

...

7.8CVSS7.7AI score0.0198EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/18 12:00 a.m.•2 views

PT-2022-28400

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.195 through 4.19.227 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/18 12:00 a.m.•2 views

PT-2022-28429

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.126 through 5.4.175 Description The issue affects the f sourcesink component in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder