Lucene search
+L

5 matches found

OSV
OSV
•added 2021/12/09 7:29 p.m.•30 views

GHSA-VRC7-6G8W-JH56 Improper Input Validation in xdLocalStorage

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...

7.1CVSS5.8AI score0.01327EPSS
SaveExploits1References5
NVD
NVD
•added 2020/04/07 6:15 p.m.•26 views

CVE-2015-9544

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...

7.1CVSS6.9AI score0.01327EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2020/04/07 5:19 p.m.•32 views

CVE-2015-9544

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...

6.9AI score0.01327EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/07 12:00 a.m.•2 views

CVE-2015-9544: Improper Input Validation

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...

7.1CVSS6.8AI score0.01327EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/07 12:00 a.m.•4 views

CVE-2015-9545: Improper Input Validation

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and...

7.1CVSS6.8AI score0.01327EPSS
SaveExploits1References2
Rows per page
Query Builder