Lucene search
+L

242 matches found

Vulnrichment
Vulnrichment
added 2023/06/02 12:0 a.m.8 views

CVE-2023-28160

When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox 111...

6AI score0.00508EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/03/15 3:33 a.m.4 views

SUSE CVE-2023-28160

When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox 111...

6.5CVSS8.4AI score0.00508EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2023/03/15 12:0 a.m.31 views

CVE-2023-28160

When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox 111...

6.5CVSS6.7AI score0.00508EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/15 12:0 a.m.6 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which originates from a redirection to a Web extension file that could lead to the disclosure of a local path...

6.5CVSS7.8AI score0.00508EPSS
Exploits0References5
OSV
OSV
added 2023/03/15 12:0 a.m.5 views

UBUNTU-CVE-2023-28160

When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox 111...

6.5CVSS7.3AI score0.00508EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.4 views

SUSE CVE-2014-1726

The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access...

4.3CVSS8.9AI score0.01416EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:46 a.m.4 views

SUSE CVE-2017-7847

Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird 52.5.2...

4.3CVSS8.8AI score0.01648EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:30 a.m.4 views

SUSE CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.3CVSS6.4AI score0.00238EPSS
Exploits0References3
OSV
OSV
added 2022/12/08 4:15 p.m.5 views

AZL-36977 CVE-2022-4123 affecting package podman for versions less than 5.6.1-2

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.3CVSS5.7AI score0.00238EPSS
Exploits0References1
OSV
OSV
added 2022/12/08 4:15 p.m.2 views

DEBIAN-CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.3CVSS5AI score0.00238EPSS
Exploits0References1
Prion
Prion
added 2022/12/08 4:15 p.m.24 views

Path traversal

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

1.7CVSS3.6AI score0.00238EPSS
Exploits0References1Affected Software2
OSV
OSV
added 2022/12/08 4:15 p.m.3 views

UBUNTU-CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.3CVSS7AI score0.00238EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/12/08 12:0 a.m.32 views

CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.9AI score0.00238EPSS
Exploits0References1
OSV
OSV
added 2022/12/08 12:0 a.m.29 views

CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.3CVSS3.5AI score0.00238EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2022/11/22 8:56 p.m.34 views

CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.1CVSS3.3AI score0.00238EPSS
Exploits0References3
OSV
OSV
added 2022/08/05 4:15 p.m.5 views

CVE-2022-33715

Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access files of One UI...

5.5CVSS5.8AI score0.00098EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/17 3:15 p.m.4 views

CVE-2022-30947

Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents...

7.5CVSS7.1AI score0.01217EPSS
Exploits0References3
OSV
OSV
added 2022/05/17 3:15 p.m.22 views

CVE-2022-30947

Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents...

7.5CVSS7.3AI score
Exploits0References2
CNNVD
CNNVD
added 2022/05/05 12:0 a.m.6 views

Splunk Enterprise 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

4.3CVSS5.1AI score0.00605EPSS
Exploits0References3
OSV
OSV
added 2022/01/01 5:15 a.m.8 views

AZL-33612 CVE-2021-44716 affecting package local-path-provisioner for versions less than 0.0.21-16

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...

7.5CVSS6.6AI score0.03958EPSS
Exploits0References1
Rows per page
Query Builder