Lucene search
+L

760 matches found

SUSE CVE
SUSE CVE
added 2024/08/07 2:54 a.m.5 views

SUSE CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

8.1CVSS6.2AI score0.00522EPSS
SaveExploits0References8
NVD
NVD
added 2024/08/06 1:15 p.m.29 views

CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

8.1CVSS0.00522EPSS
SaveExploits0References6
OSV
OSV
added 2024/08/06 1:15 p.m.5 views

DEBIAN-CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

6.5CVSS7.2AI score0.00522EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/06 1:15 p.m.12 views

CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

6.5CVSS5.8AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2024/08/06 1:15 p.m.15 views

CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

8.1CVSS6.8AI score0.00522EPSS
SaveExploits0References11
OSV
OSV
added 2024/08/06 1:15 p.m.8 views

UBUNTU-CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

8.1CVSS6.7AI score0.00522EPSS
SaveExploits0References12
Debian CVE
Debian CVE
added 2024/08/06 12:38 p.m.21 views

CVE-2024-7529

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

8.1CVSS7.2AI score0.00522EPSS
SaveExploits0
CVE
CVE
added 2024/08/06 12:38 p.m.313 views

CVE-2024-7529

CVE-2024-7529: The date picker can partially obscure security prompts in Mozilla Firefox and Thunderbird up to specific versions (Firefox < 129, ESR < 115.14/128.1; Thunderbird

8.1CVSS7.6AI score0.00522EPSS
SaveExploits0References6Affected Software3
Mozilla
Mozilla
added 2024/08/06 12:00 a.m.56 views

Security Vulnerabilities fixed in Thunderbird 128.1 — Mozilla

Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape....

9.8CVSS7AI score0.00638EPSS
SaveExploits0References10Affected Software1
Mozilla
Mozilla
added 2024/08/06 12:00 a.m.37 views

Security Vulnerabilities fixed in Firefox ESR 115.14 — Mozilla

Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. Incomplete WebAssembly exception handing could have led to a use-after-free. Editor code failed to check an attribute value. This cou...

9.8CVSS9.3AI score0.00634EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2024/07/11 12:35 a.m.11 views

MAL-2024-7722 Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/07/11 12:35 a.m.9 views

Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:04 p.m.6 views

Malicious code in tml-language-picker (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 1:04 p.m.7 views

MAL-2024-3130 Malicious code in tml-language-picker (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Veracode
Veracode
added 2024/04/03 10:29 a.m.29 views

Denial Of Service (DoS)

moodle/moodle is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient file size checks in the file picker's unzip functionality. An attacker can cause a denial of service by uploading specially crafted zip files...

7.5CVSS6.4AI score0.00944EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2024/03/31 6:22 p.m.25 views

BIT-MOODLE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS7.3AI score0.00944EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/03/26 11:31 a.m.13 views

CVE-2024-24719 WordPress Kikote plugin <= 1.8.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Checkout for WooCommerce: from n/a through 1.8.9...

4.3CVSS8.6AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 11:31 a.m.58 views

CVE-2024-24719

CVE-2024-24719 affects the Kikote – Location Picker at Checkout & Google Address AutoFill for WooCommerce plugin. The vulnerability is Missing Authorization in the checkout_map_rules_order_ajax_handler, enabling unauthorized modification of rule orders in affected installs. Affected versions are ...

4.3CVSS8.6AI score0.00318EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/26 11:31 a.m.28 views

CVE-2024-24719 WordPress Kikote plugin <= 1.8.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Checkout for WooCommerce: from n/a through 1.8.9...

4.3CVSS5AI score0.00318EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2024/02/19 6:31 p.m.35 views

Uncontrolled Resource Consumption in moodle

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

7.5CVSS6.8AI score0.00944EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder