Lucene search
K

538 matches found

CNVD
CNVD
added 2021/03/11 12:0 a.m.8 views

Facebook Gameroom Code Execution Vulnerability

Facebook Gameroom is a software of Facebook Inc. It is used for watching videos, playing games, and sharing content. A security vulnerability exists in versions prior to Facebook Gameroom v1.26.0 that stems from the fbgames protocol handler not properly referencing parameters passed to the...

9.8CVSS7.2AI score0.01693EPSS
Exploits0References1
NVD
NVD
added 2021/03/10 4:15 p.m.9 views

CVE-2021-24030

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0...

9.8CVSS0.01693EPSS
Exploits0References1
Prion
Prion
added 2021/03/10 4:15 p.m.19 views

Design/Logic Flaw

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0...

7.5CVSS9.4AI score0.01693EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/03/10 3:50 p.m.54 views

CVE-2021-24030

The CVE-2021-24030 issue affects Facebook Gameroom’s fbgames protocol handler, where arguments to the executable are not properly quoted. This causes code execution if a malicious URL is processed. Affected versions are prior to v1.26.0; upgrading to v1.26.0 or later is the stated remediation. Th...

9.8CVSS9.4AI score0.01693EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/11/24 12:0 a.m.2 views

JetBrains Toolbox Denial of Service Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A denial-of-service vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from susceptibility to denial-of-service attacks via the browser protocol handler. No detailed...

7.5CVSS6.8AI score0.01367EPSS
Exploits0References1
CNVD
CNVD
added 2020/11/24 12:0 a.m.2 views

JetBrains Toolbox Remote Code Execution Vulnerability

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A remote code execution vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from vulnerability to attacks that execute remote code via a browser protocol handler. No details...

10CVSS8.1AI score0.04379EPSS
Exploits0References1
OSV
OSV
added 2020/11/16 3:15 p.m.1 views

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

9.8CVSS7.4AI score0.04379EPSS
Exploits0References2
OSV
OSV
added 2020/11/16 3:15 p.m.1 views

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

7.5CVSS7.1AI score0.01367EPSS
Exploits0References2
NVD
NVD
added 2020/11/16 3:15 p.m.18 views

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

7.5CVSS7.4AI score0.01367EPSS
Exploits0References2
NVD
NVD
added 2020/11/16 3:15 p.m.19 views

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

10CVSS9.7AI score0.04379EPSS
Exploits0References2
Prion
Prion
added 2020/11/16 3:15 p.m.18 views

Remote code execution

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

10CVSS9.5AI score0.04379EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2020/11/16 3:15 p.m.21 views

Design/Logic Flaw

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

5CVSS7.4AI score0.01367EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/11/16 3:1 p.m.169 views

CVE-2020-25207

CVE-2020-25207 affects JetBrains Toolbox prior to version 1.18. The vulnerability enables remote code execution via a browser protocol handler, with CVSS 3.1 base score 9.8 (CRITICAL). Connected documents confirm the issue and vector but do not specify a patched version; no exploitation details a...

10CVSS9.5AI score0.04379EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/16 3:1 p.m.19 views

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

9.7AI score0.04379EPSS
Exploits0References2
CVE
CVE
added 2020/11/16 3:0 p.m.159 views

CVE-2020-25013

CVE-2020-25013 : JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service through a browser protocol handler. The issue arises in the tool’s handling of browser protocol links, allowing a DoS condition. Connected sources corroborate the vendor advisory and related security bulle...

7.5CVSS7.4AI score0.01367EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/16 3:0 p.m.31 views

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

7.4AI score0.01367EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.2 views

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A remote code execution vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from vulnerability to attacks that execute remote code via a browser protocol handler. No details...

10CVSS7.9AI score0.04379EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.4 views

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A denial-of-service vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from susceptibility to denial-of-service attacks via the browser protocol handler. No detailed...

7.5CVSS7.1AI score0.01367EPSS
Exploits0References2
Veracode
Veracode
added 2020/10/25 12:40 p.m.26 views

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an extern...

5.3CVSS2.2AI score0.00936EPSS
Exploits0References2Affected Software6
OSV
OSV
added 2020/10/22 9:15 p.m.2 views

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

5.3CVSS6.9AI score0.00936EPSS
Exploits0References2
Rows per page
Query Builder