Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-16766

Malware in sbrugna...

5.3CVSS7.5AI score0.01355EPSS
Exploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-19169

Malware in sbrugna...

4.3CVSS7.1AI score0.00201EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-9807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content...

4.3CVSS7.2AI score0.00201EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.1 views

SUSE CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

4.3CVSS8.5AI score0.00201EPSS
Exploits1References4
Veracode
Veracode
added 2019/05/02 6:45 a.m.21 views

Arbitrary Code Execution

Firefox, Firefox ESR and Thunderbird are vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable URI Handler component by spoofing the origin of a modal alert via iframe content and the 'data:' protocol leading to potential code execution...

5.3CVSS8AI score0.01355EPSS
Exploits1References13Affected Software4
NVD
NVD
added 2019/04/26 5:29 p.m.12 views

CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

4.3CVSS4.3AI score0.00201EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2019/04/26 4:10 p.m.24 views

CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

4.3CVSS7.3AI score0.00201EPSS
Exploits1
OSV
OSV
added 2019/03/20 12:0 a.m.0 views

UBUNTU-CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

4.3CVSS6.8AI score0.00201EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2019/03/20 12:0 a.m.14 views

CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

4.3CVSS6.8AI score0.00201EPSS
Exploits1References4
OSV
OSV
added 2018/06/11 9:29 p.m.6 views

CVE-2017-7791

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

5.3CVSS7.8AI score
Exploits0References11
OSV
OSV
added 2018/06/11 9:29 p.m.0 views

DEBIAN-CVE-2017-7791

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

5.3CVSS6.9AI score0.01355EPSS
Exploits1References1
NVD
NVD
added 2018/06/11 9:29 p.m.12 views

CVE-2017-7791

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

5.3CVSS6.5AI score0.01355EPSS
Exploits1References11
Prion
Prion
added 2018/06/11 9:29 p.m.17 views

Design/Logic Flaw

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

5CVSS6.1AI score0.01355EPSS
Exploits1References11Affected Software10
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.26 views

CVE-2017-7791

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

5.3CVSS7.9AI score0.01355EPSS
Exploits1
CVE
CVE
added 2018/06/11 9:0 p.m.170 views

CVE-2017-7791

CVE-2017-7791: A data: protocol-based modal alert spoofing vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

5.3CVSS6.5AI score0.01355EPSS
Exploits1References11Affected Software1
OSV
OSV
added 2017/08/10 12:0 a.m.0 views

UBUNTU-CVE-2017-7791

On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox ...

5.3CVSS6.8AI score0.01355EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2006/04/18 11:12 a.m.3 views

security flaw

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by 1 "using a modal alert to suspend an event handler while a new page is being loaded", 2 using eval, and using...

4.3CVSS5.9AI score0.01946EPSS
Exploits1References4
Rows per page
Query Builder