Lucene search
+L

748 matches found

Qualys Blog
Qualys Blog
added 2024/10/10 2:0 p.m.11 views

Introducing the Enhanced User Interface of the Qualys Enterprise TruRisk™ Platform

Launching the Enhanced User Interface The Qualys Product Team is excited to announce upcoming enhancements to the Qualys User Interface. These User Experience UX enhancements will make your platform experience faster, smoother, and more immersive. We continuously leverage insights from channels...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/05 8:15 a.m.6 views

CVE-2024-8486

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions up to, and including, 2.16.3 due to insufficient input sanitization and output escaping. This make...

5.4CVSS5.9AI score0.00363EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/05 8:15 a.m.30 views

CVE-2024-8486

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions up to, and including, 2.16.3 due to insufficient input sanitization and output escaping. This make...

6.4CVSS0.00363EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/10/05 7:39 a.m.19 views

CVE-2024-8486 Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions up to, and including, 2.16.3 due to insufficient input sanitization and output escaping. This make...

6.4CVSS5.8AI score0.00363EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/05 7:39 a.m.38 views

CVE-2024-8486 Shortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in the Modern Heading and Icon Picker widgets all versions up to, and including, 2.16.3 due to insufficient input sanitization and output escaping. This make...

6.4CVSS0.00363EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/05 12:0 a.m.12 views

PT-2024-39052 · WordPress · Phlox

Name of the Vulnerable Software and Affected Versions: Shortcodes and extra features for Phlox theme plugin for WordPress versions up to, and including, 2.16.3 Description: The issue is related to Stored Cross-Site Scripting via the url parameter in the Modern Heading and Icon Picker widgets. Thi...

6.4CVSS6.3AI score0.00363EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2024/09/18 12:0 a.m.28 views

Amazon Linux 2 : firefox (ALASFIREFOX-2024-030)

The version of firefox installed on the remote host is prior to 115.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-030 advisory. Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be...

9.8CVSS7.6AI score0.00634EPSS
SaveExploits0References20
Amazon
Amazon
added 2024/09/05 12:0 a.m.19 views

Important: thunderbird

Issue Overview: Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird...

9.8CVSS7.6AI score0.00634EPSS
SaveExploits0
Redos
Redos
added 2024/08/28 12:0 a.m.29 views

ROS-20240828-03

Vulnerability of Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to the incorrect handling of exceptional conditions with improper handling of exceptional conditions. Exploitation of the vulnerability could allow a remote attacker to use memory after it has been...

9.8CVSS7.4AI score0.00634EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:0 a.m.8 views

The vulnerability of the Date Picker function in Mozilla Firefox and Firefox ESR browsers allows a malicious actor to provide arbitrary permissions and gain unauthorized access to data or functions.

The vulnerability of the Date Picker function in Mozilla Firefox and Firefox ESR browsers is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to provide arbitrary permissions and gain unauthorized access to data or function...

9.4CVSS7.2AI score0.00522EPSS
SaveExploits0References24Affected Software8
RedHat Linux
RedHat Linux
added 2024/08/19 2:6 a.m.8 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/19 1:48 a.m.7 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/15 5:21 a.m.7 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:5 p.m.5 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:5 p.m.7 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:4 p.m.7 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:3 p.m.6 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:3 p.m.6 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:2 p.m.5 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/14 3:2 p.m.6 views

mozilla: Document content could partially obscure security prompts

The Mozilla Foundation Security Advisory describes this flaw as: The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0References5
Rows per page
Query Builder