Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:35 a.m.3 views

CVE-2024-32986

PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...

9.6CVSS7AI score0.00125EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 10:15 a.m.13 views

CVE-2024-32986

PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...

9.6CVSS9.3AI score0.00125EPSS
Exploits0References3
OSV
OSV
added 2024/05/03 9:58 a.m.20 views

CVE-2024-32986 Arbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox

PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...

9.6CVSS7.1AI score0.00125EPSS
Exploits0References5
CVE
CVE
added 2024/05/03 9:58 a.m.44 views

CVE-2024-32986

Summary : CVE-2024-32986 concerns PWAsForFirefox. On Linux and PortableApps.com, improper sanitization of web app properties (name, description, shortcuts) allowed a malicious web app to inject extra lines into XDG Desktop Entries and AppInfo.ini, potentially adding an Exec key that could execute...

9.6CVSS7.1AI score0.00125EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/03 9:58 a.m.13 views

CVE-2024-32986 Arbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox

PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...

9.6CVSS7.2AI score0.00125EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2018/05/06 4:24 p.m.14 views

portableapps.com XSS vulnerability

Open Bug Bounty ID: OBB-612831 Description| Value ---|--- Affected Website:| portableapps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Rows per page
Query Builder