Lucene search
+L

1931 matches found

Code423n4
Code423n4
•added 2022/01/27 12:00 a.m.•11 views

Launch event creation can be denied

Handle cmichel Vulnerability details The RocketJoeFactory.createRJLaunchEvent requires that no previous launch event was already created for the token. function createRJLaunchEvent address issuer, uint256 phaseOneStartTime, address token, uint256 tokenAmount, uint256 tokenIncentivesPercent, uint2...

7AI score
SaveExploits0
OSV
OSV
•added 2022/01/26 8:36 a.m.•13 views

OPENSUSE-SU-2022:0199-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT bsc1194547. - CVE-2022-22737: Fixed race condition when playing audio files bsc1194547. - CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur bsc1194547. -...

10CVSS8.4AI score0.01381EPSS
SaveExploits6References16
OSV
OSV
•added 2022/01/25 12:59 p.m.•9 views

SUSE-SU-2022:14880-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT bsc1194547. - CVE-2022-22737: Fixed race condition when playing audio files bsc1194547. - CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur bsc1194547. - CVE-2022-22739:...

10CVSS8.2AI score0.01381EPSS
SaveExploits6References16
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•67 views

JerryScript ecma-objects.c denial of service vulnerability

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/operations/ecma-objects.c , an attacker could use this vulnerability to launch a denial of service...

5.5CVSS3.1AI score0.00621EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/01/14 5:55 a.m.•39 views

Cross-Site Request Forgery (CSRF)

firefox is vulnerable to cross site request forgery. The vulnerability exists due to a Spoofed Origin On External Protocol Launch Dialog...

6.5CVSS3.3AI score0.00739EPSS
SaveExploits1References7Affected Software7
Veracode
Veracode
•added 2022/01/14 5:54 a.m.•36 views

Command Injection

firefox is vulnerable to command injection. The vulnerability exists due to the lack of throttling on external protocol launch dialog allowing an attacker to trick users into accepting launching a program to handle an external URL protocol...

6.5CVSS4.5AI score0.00686EPSS
SaveExploits1References7Affected Software7
RedHat Linux
RedHat Linux
•added 2022/01/12 1:09 p.m.•17 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 1:09 p.m.•15 views

Mozilla: Spoofed origin on external protocol launch dialog

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:35 p.m.•16 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:27 p.m.•12 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:27 p.m.•10 views

Mozilla: Spoofed origin on external protocol launch dialog

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:21 p.m.•18 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:21 p.m.•16 views

Mozilla: Spoofed origin on external protocol launch dialog

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:08 p.m.•9 views

Mozilla: Spoofed origin on external protocol launch dialog

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:08 p.m.•19 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 12:04 p.m.•65 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

10CVSS6.7AI score0.01354EPSS
SaveExploits6References13
RedHat Linux
RedHat Linux
•added 2022/01/12 12:04 p.m.•23 views

Mozilla: Spoofed origin on external protocol launch dialog

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 12:04 p.m.•18 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/01/12 11:59 a.m.•12 views

Mozilla: Spoofed origin on external protocol launch dialog

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/01/12 11:48 a.m.•13 views

Mozilla: Missing throttling on external protocol launch dialog

The Mozilla Foundation Security Advisory describes this flaw as: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol...

6.5CVSS7.3AI score0.00686EPSS
SaveExploits1References6
Rows per page
Query Builder