Lucene search
+L

48 matches found

osv-cleanstart
osv-cleanstart
•added 2026/10/01 8:47 a.m.•9 views

CLEANSTART-2024-LB76268 Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90

Security vulnerability affects the chromium package. Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90...

6.5CVSS6.8AI score0.01398EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/08/26 12:00 a.m.•64 views

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2025-19564)

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for iOS prior to version 141, which stems from a QR scanner that may allow arbitrary websites to be opened. An attacker could exploit the...

9.1CVSS6.6AI score0.00394EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/08/19 9:15 p.m.•40 views

CVE-2025-54145

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme This vulnerability affects Firefox for iOS 141...

9.1CVSS6.7AI score0.00394EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/19 9:15 p.m.•19 views

CVE-2025-54145

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme This vulnerability affects Firefox for iOS 141...

9.1CVSS5.8AI score0.00394EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/19 9:15 p.m.•18 views

CVE-2025-54145

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141...

9.1CVSS0.00394EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•6 views

CVE-2025-54145: URL Redirection to Untrusted Site

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141...

9.1CVSS5.8AI score0.00394EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•20 views

Mozilla Firefox for iOS 安全漏洞

Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A security bypass vulnerability exists in Mozilla Firefox for iOS prior to version 141, which stems from a QR scanner that may allow arbitrary websites to be opened. An attacker could exploit the...

9.1CVSS6.5AI score0.00394EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-54145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme...

9.1CVSS5.9AI score0.00394EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/07/23 12:00 a.m.•23 views

PT-2025-31714

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 141 Description: The QR scanner component is susceptible to exploitation, potentially allowing malicious websites to be opened. This occurs when a user scans a specially crafted link utilizing Firefox's...

9.1CVSS6AI score0.00394EPSS
SaveExploits0References11
Mozilla
Mozilla
•added 2025/07/22 12:00 a.m.•48 views

Security Vulnerabilities fixed in Firefox for iOS 141 — Mozilla

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or interna...

9.8CVSS7.1AI score0.00481EPSS
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/24 11:30 a.m.•17 views

Malicious code in @native-rabobank/native-qr-scanner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b17e7bdb26521a7b7e638054ce600a2db0fba3fe05b08edc51b7236581947c1a The OpenSSF Package Analysis project identified...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 3:36 a.m.•26 views

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

6.1CVSS6.7AI score0.0045EPSS
SaveExploits1References1
NVD
NVD
•added 2023/07/01 12:15 a.m.•40 views

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

6.1CVSS6.2AI score0.0045EPSS
SaveExploits1References1
Prion
Prion
•added 2023/07/01 12:15 a.m.•28 views

Open redirect

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

5.8CVSS6.1AI score0.0045EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/06/30 11:20 p.m.•54 views

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

6.4AI score0.0045EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2023/06/30 11:20 p.m.•25 views

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

7AI score
SaveExploits0References3
Mend
Mend
•added 2023/06/30 11:20 p.m.•5 views

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

6.1CVSS0.0045EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/06/30 12:00 a.m.•25 views

PT-2023-21674 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser Android versions prior to 1.52.117 Description: An Open Redirect issue exists where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now, the user must...

6.1CVSS6AI score0.0045EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/30 12:00 a.m.•7 views

CVE-2023-28364: URL Redirection to Untrusted Site

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

6.1CVSS6.3AI score0.0045EPSS
SaveExploits1References2
Brave Browser
Brave Browser
•added 2023/03/10 2:31 a.m.•24 views

Brave Android 1.49.122 Security Fixes

Restricted QR scanner to only open HTTP/HTTPS URL schemas rather than allowing any valid URL schema to be opened. Upgraded Chromium to 111.0.5563.64 — refer to Google Chrome advisories for inherited CVEs...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder