Lucene search
K

639 matches found

RedHat Linux
RedHat Linux
added 2024/12/05 2:7 p.m.4 views

firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

8.8CVSS7.4AI score0.00762EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/12/03 2:5 p.m.2 views

firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

8.8CVSS7.4AI score0.00762EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/12/03 11:37 a.m.3 views

firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

8.8CVSS7.4AI score0.00762EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/12/03 11:34 a.m.3 views

firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

8.8CVSS7.4AI score0.00762EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/12/02 7:1 p.m.2 views

firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

8.8CVSS7.4AI score0.00762EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2024/12/02 4:56 p.m.1 views

firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

8.8CVSS7.4AI score0.00762EPSS
Exploits0References9
Cvelist
Cvelist
added 2024/11/28 10:20 p.m.15 views

CVE-2024-9852 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...

7.8CVSS0.00243EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/28 10:20 p.m.8 views

CVE-2024-9852 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...

7.8CVSS7.5AI score0.00243EPSS
Exploits0References3
CVE
CVE
added 2024/11/28 10:20 p.m.56 views

CVE-2024-9852

CVE-2024-9852 describes an Uncontrolled Search Path Element vulnerability affecting Mitsubishi Electric GENESIS64, ICONICS Suite, MC Works64, and GENESIS32 (all versions) where placing a crafted DLL in a specific folder enables a local authenticated attacker to execute code. The root cause is DLL...

7.8CVSS7.5AI score0.00243EPSS
Exploits0References3
CVE
CVE
added 2024/11/28 10:18 p.m.64 views

CVE-2024-8300

CVE-2024-8300 describes a dead-code vulnerability in Mitsubishi Electric GENESIS64 and ICONICS Suite components (versions 10.97.2–10.97.3) that enables a local authenticated attacker to execute malicious code by tampering with a crafted DLL. The impact includes potential disclosure, modification,...

7CVSS8.6AI score0.00199EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/11/28 10:18 p.m.18 views

CVE-2024-8300 Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite

Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97...

7CVSS0.00199EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/28 10:18 p.m.10 views

CVE-2024-8300 Malicious Code Execution Vulnerability in GENESIS64 and ICONICS Suite

Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97...

7CVSS8.6AI score0.00199EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/28 10:16 p.m.5 views

CVE-2024-8299 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...

7.8CVSS7.5AI score0.00243EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/11/28 10:16 p.m.17 views

CVE-2024-8299 Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...

7.8CVSS0.00243EPSS
Exploits0References3
CVE
CVE
added 2024/11/28 10:16 p.m.77 views

CVE-2024-8299

CVE-2024-8299 is an Uncontrolled Search Path Element vulnerability affecting ICONICS GENESIS64, ICONICS Suite, MC Works64, and GENESIS32 (all versions). The root cause is DLL hijacking via a local, authenticated attacker storing a specially crafted DLL in a target folder, enabling arbitrary code ...

7.8CVSS7.5AI score0.00243EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2024/11/27 4:5 p.m.13 views

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers

A critical security flaw impacting the ProjectSend open-source file-sharing application has likely come under active exploitation in the wild, according to findings from VulnCheck. The vulnerability, originally patched over a year-and-a-half ago as part of a commit pushed in May 2023, was not...

9.8CVSS10AI score0.91559EPSS
Exploits4
RedhatCVE
RedhatCVE
added 2024/11/26 11:20 p.m.22 views

CVE-2024-11697

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution...

3.1CVSS6.6AI score0.00762EPSS
Exploits0References8
NVD
NVD
added 2024/11/26 2:15 p.m.36 views

CVE-2024-11697

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

8.8CVSS0.00762EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/11/26 1:33 p.m.14 views

CVE-2024-11697

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

6.8AI score0.00762EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/11/26 1:33 p.m.14 views

CVE-2024-11697

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

8.8CVSS6.6AI score0.00762EPSS
Exploits0
Rows per page
Query Builder