Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-2086

Malware in sbrugna...

3.3CVSS4.1AI score0.00053EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/22 4:19 a.m.7 views

CVE-2019-14671

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

3.3CVSS6.7AI score0.00053EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2025/01/09 12:20 a.m.1 views

SUSE CVE-2025-0244

When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 134...

5.3CVSS6.6AI score0.09835EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/01/09 12:20 a.m.1 views

SUSE CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability was fixed in Firefox 134...

6.5CVSS6AI score0.00185EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/01/07 10:19 p.m.6 views

CVE-2025-0244

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When redirecting to an invalid protocol scheme, an attacker could spoof the address bar...

8.1CVSS6AI score0.09835EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2025/01/07 4:15 p.m.2 views

CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability affects Firefox 134...

6.5CVSS6.2AI score0.09835EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/01/07 4:15 p.m.2 views

CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability was fixed in Firefox 134...

6.5CVSS6.6AI score0.09835EPSS
Exploits0References3
OSV
OSV
added 2025/01/07 4:15 p.m.0 views

CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability affects Firefox 134...

6.5CVSS7.3AI score
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/01/07 4:15 p.m.1 views

CVE-2025-0244

When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 134...

5.3CVSS6.2AI score0.09835EPSS
Exploits0References2
OSV
OSV
added 2025/01/07 4:15 p.m.0 views

UBUNTU-CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability affects Firefox 134...

6.5CVSS5.8AI score0.00185EPSS
Exploits0References5
OSV
OSV
added 2025/01/07 4:15 p.m.0 views

UBUNTU-CVE-2025-0244

When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 134...

5.3CVSS5.8AI score0.09835EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/01/07 4:7 p.m.12 views

CVE-2025-0246 Address bar spoofing using an invalid protocol scheme on Firefox for Android

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability was fixed in Firefox 134...

0.00185EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/01/07 4:7 p.m.13 views

CVE-2025-0246

When using an invalid protocol scheme, an attacker could spoof the address bar. Note: This issue only affected Android operating systems. Other operating systems are unaffected. Note: This issue is a different issue from CVE-2025-0244. This vulnerability was fixed in Firefox 134...

6.5CVSS5.6AI score0.00185EPSS
Exploits0
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.2 views

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability previously existed in Mozilla Firefox version 134, which stemmed from an attacker being able to spoof the address bar when redirected to an invalid protocol sche...

5.3CVSS6.7AI score0.09835EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.1 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 134, which stems from an attacker being able to spoof the address bar when using an invalid protocol scheme...

6.5CVSS6.7AI score0.00185EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/11/16 12:0 a.m.1 views

PT-2021-6408 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft App Installer versions prior to 1.21.3421.0 Description: The issue is related to a spoofing vulnerability in the AppX installer that affects Microsoft Windows. This vulnerability can be exploited by attackers using specially crafted...

7.6CVSS9AI score0.25241EPSS
Exploits1References27
Github Security Blog
Github Security Blog
added 2021/09/08 5:27 p.m.25 views

Improper Input Validation in Firefly III

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

3.3CVSS2AI score0.00053EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2019/08/05 8:15 p.m.12 views

CVE-2019-14671

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

3.3CVSS3.8AI score0.00053EPSS
Exploits1References2
Prion
Prion
added 2019/08/05 8:15 p.m.8 views

Design/Logic Flaw

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

2.1CVSS3.9AI score0.00053EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/08/05 7:23 p.m.11 views

CVE-2019-14671

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

3.8AI score0.00053EPSS
Exploits1References2
Rows per page
Query Builder