Lucene search
+L

266 matches found

Circl
Circl
added 2022/09/23 10:13 p.m.9 views

CVE-2022-35096

creationtimestamp| type| source ---|---|--- 2022-09-23 22:13:53+00:00| seen| https://t.me/cibsecurity/50379...

5.5CVSS5.5AI score0.00402EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/19 3:55 a.m.8 views

MAL-2022-5765 Malicious code in resize-obsever-pulyfjll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecad73c257b6414fec8cc651d7b3f4b6c6eb420c0ac9259ad3440f7d56276dd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
added 2022/06/23 9:25 a.m.6 views

Malicious Package

Overview epic-am-observer-store is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7AI score
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2021/06/07 12:16 p.m.10 views

jamaicaobserver.com Cross Site Scripting vulnerability OBB-2041850

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jamaicaobserver.com ---|--- Open Bug...

6.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.25 views

The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application of the Aurora operating system allows a perpetrator to trigger a service failure.

The vulnerability of the PresentationAvailabilityObserver::AvailabilityChanged method in the Sailfish Browser application for the Aurora operating system is related to the use of dynamic memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.2CVSS5.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2021/01/20 8:15 p.m.9 views

CVE-2021-1303

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

8.8CVSS5.9AI score0.01404EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/20 7:55 p.m.27 views

CVE-2021-1303 Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

4.3CVSS8.9AI score0.01404EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/20 4:0 p.m.58 views

Cisco DNA Center Privilege Escalation Vulnerability

A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability ...

4.3CVSS6.7AI score0.01404EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/01/20 12:0 a.m.18 views

PT-2021-1839 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: The issue is related to improper enforcement of actions for assigned user roles in the user management service. This could allow a remote attacker to execute unauthorized commands ...

8.8CVSS5.2AI score0.01404EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/12/21 12:0 a.m.5 views

Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-00391)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in FireFox versions prior to FireFox 83, which stems from the fact that when listening for page changes using a mutation observer, a malicious web page may cause Firefox...

6.5CVSS8.7AI score0.00844EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/09 1:15 a.m.6 views

CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

6.5CVSS7.1AI score0.00844EPSS
SaveExploits0References2
Prion
Prion
added 2020/12/09 1:15 a.m.28 views

Code injection

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

4.3CVSS6.6AI score0.00844EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/12/09 12:25 a.m.33 views

CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

6.6AI score0.00844EPSS
SaveExploits0References2
CVE
CVE
added 2020/12/09 12:25 a.m.180 views

CVE-2020-26967

The CVE-2020-26967 entry concerns Mozilla Firefox prior to version 83, where a MutationObserver-based page-change listener could cause Firefox Screenshots to interact with injected elements, triggering internal errors and unexpected behavior in the Screenshots code. The description is corroborate...

6.5CVSS6.5AI score0.00844EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2020/12/09 12:25 a.m.76 views

CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

6.5CVSS6.8AI score0.00844EPSS
SaveExploits0
Circl
Circl
added 2020/12/03 12:55 a.m.9 views

CVE-2020-29285

creationtimestamp| type| source ---|---|--- 2020-12-03 00:55:23+00:00| seen| https://t.me/cibsecurity/17065...

9.8CVSS8.7AI score0.01318EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/17 12:0 a.m.9 views

UBUNTU-CVE-2020-26967

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability...

6.5CVSS7AI score0.00844EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2020/11/17 12:0 a.m.9 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in FireFox versions prior to FireFox 83, which stems from the fact that when listening for page changes using a mutation observer, a malicious web page may cause Firefox...

6.5CVSS6.9AI score0.00844EPSS
SaveExploits0References7
NVD
NVD
added 2020/08/20 1:17 a.m.23 views

CVE-2020-15531

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...

8.8CVSS9.2AI score0.04003EPSS
SaveExploits1References4
NVD
NVD
added 2020/08/20 1:17 a.m.24 views

CVE-2020-15532

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...

6.5CVSS6.7AI score0.01509EPSS
SaveExploits1References3
Rows per page
Query Builder