Lucene search
+L

145 matches found

Cvelist
Cvelist
added 2023/09/14 5:0 a.m.35 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS7.5AI score0.0075EPSS
SaveExploits1References4
CVE
CVE
added 2023/09/14 5:0 a.m.98 views

CVE-2023-26141

CVE-2023-26141 affects sidekiq prior to 7.1.3. The vulnerability arises from insufficient checks in the dashboard-charts.js file, allowing an attacker to manipulate localStorage and trigger excessive polling, leading to Denial of Service. The DoS impact is documented across multiple feeds, with t...

7.5CVSS4.8AI score0.0075EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/14 5:0 a.m.11 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.9AI score0.0075EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2023/09/14 5:0 a.m.75 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.7AI score0.0075EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2023/09/14 12:0 a.m.25 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.3AI score0.0075EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/09/14 12:0 a.m.7 views

Mike Perham sidekiq data forgery issue vulnerability

Mike Perham sidekiq is a Mike Perham open source application. Using threads to process many jobs simultaneously in the same process A security vulnerability in Mike Perham sidekiq prior to version 7.1.3, which stems from insufficient checking of the file dashboard-charts.js, allows an attacker to...

7.5CVSS6.5AI score0.0075EPSS
SaveExploits1References6
RubySec
RubySec
added 2023/09/14 12:0 a.m.34 views

sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.8AI score0.0075EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/25 12:0 a.m.6 views

The vulnerability of the localstorage object in the Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the localstorage storage mechanism in the Mozilla Firefox browser is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS6.8AI score0.00575EPSS
SaveExploits0References7Affected Software11
SUSE CVE
SUSE CVE
added 2023/07/07 2:19 a.m.4 views

SUSE CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS6.2AI score0.00575EPSS
SaveExploits0References7
OSV
OSV
added 2023/07/05 10:15 a.m.5 views

CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS7.4AI score0.00575EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/05 10:15 a.m.16 views

Code injection

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

4.3CVSS5.8AI score0.00575EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2023/07/05 10:15 a.m.22 views

CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS6.8AI score0.00575EPSS
SaveExploits0References5
OSV
OSV
added 2023/07/05 10:15 a.m.3 views

UBUNTU-CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS6.8AI score0.00575EPSS
SaveExploits0References6
OSV
OSV
added 2023/07/05 9:23 a.m.6 views

USN-6201-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-37201, CVE-2023-37202,...

8.8CVSS7.1AI score0.00755EPSS
SaveExploits1References14
Vulnrichment
Vulnrichment
added 2023/07/05 9:1 a.m.13 views

CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.4AI score0.00575EPSS
SaveExploits0References3
CVE
CVE
added 2023/07/05 9:1 a.m.129 views

CVE-2023-3482

The CVE-2023-3482 issue affects Mozilla Firefox prior to version 115, where blocking all cookies does not prevent data exfiltration via localStorage using an iframe with src='about:blank'. This allows a malicious site to store tracking data in the local storage without permission, representing an...

6.5CVSS6.4AI score0.00575EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2023/07/05 9:1 a.m.22 views

CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS8.1AI score0.00575EPSS
SaveExploits0
Prion
Prion
added 2023/02/03 1:15 a.m.19 views

Design/Logic Flaw

In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim...

4.9CVSS5.4AI score0.00562EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/02/03 12:0 a.m.13 views

CVE-2023-23636

In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim...

5.4CVSS6.5AI score0.00643EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/02/03 12:0 a.m.45 views

CVE-2023-23635

In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim...

5.6AI score0.00562EPSS
SaveExploits1References3
Rows per page
Query Builder