Lucene search
+L

27 matches found

Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.28 views

PT-2025-6064

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the cachestat system call. The issue arose when cachestat was added as a more convenient and performant version of...

7.8CVSS7.4AI score0.00873EPSS
SaveExploits8References447
Prion
Prion
added 2023/06/02 5:15 p.m.22 views

Design/Logic Flaw

A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefo...

4.3CVSS6.6AI score0.0034EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/01/18 12:00 a.m.42 views

CVE-2023-23597

A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefo...

6.5CVSS6.9AI score0.0034EPSS
SaveExploits0References3
OSV
OSV
added 2023/01/18 12:00 a.m.11 views

UBUNTU-CVE-2023-23597

A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefo...

6.5CVSS7.2AI score0.0034EPSS
SaveExploits0References4
OSV
OSV
added 2016/12/23 10:59 p.m.9 views

UBUNTU-CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled...

8.1CVSS7.3AI score0.0192EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2015/03/27 12:00 a.m.59 views

Fedora 20 : dokuwiki-0-0.24.20140929c.fc20 (2015-3211)

This update fixes CVE-2015-2172 - There's a security hole in the ACL plugins remote API component. The plugin failes to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also has permissions to set up their own...

6.5CVSS6.1AI score0.06463EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2013/03/29 12:00 a.m.40 views

MailOrderWorks 5.907 Cross Site Scripting

Title: ====== MailOrderWorks v5.907 - Multiple Web Vulnerabilities Date: ===== 2013-01-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=798 VL-ID: ===== 796 Common Vulnerability Scoring System: ==================================== 4.5 Introduction: ============= Mail...

7.4AI score
SaveExploits0
Rows per page
Query Builder