Lucene search
+L

395 matches found

OSV
OSV
added 2022/05/17 4:58 a.m.6 views

GHSA-27Q4-38QF-M25H OpenStack Compute Nova Improper Access Control

The XenAPI backend in OpenStack Compute Nova Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups 1 when resizing an image or 2 during live migration, which allows remote attackers to bypass intended restrictions...

6.4CVSS6.5AI score0.01808EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2022/05/17 4:58 a.m.34 views

OpenStack Compute Nova Improper Access Control

The XenAPI backend in OpenStack Compute Nova Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups 1 when resizing an image or 2 during live migration, which allows remote attackers to bypass intended restrictions...

6.4CVSS7.3AI score0.01808EPSS
SaveExploits0References10Affected Software1
OpenVAS
OpenVAS
added 2022/04/27 12:0 a.m.24 views

Mozilla Firefox Security Advisory (MFSA2022-10) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2022-10. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

9.6CVSS6.7AI score0.00931EPSS
SaveExploits5References9
Tenable Nessus
Tenable Nessus
added 2022/03/17 12:0 a.m.52 views

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5321-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5321-2 advisory. USN-5321-1 fixed vulnerabilities in Firefox. The update didn't include arm64 because of a regression. This update provides the corresponding...

9.6CVSS7.3AI score0.00931EPSS
SaveExploits5References8
Tenable Nessus
Tenable Nessus
added 2022/03/15 12:0 a.m.48 views

SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2022:0821-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0821-1 advisory. Firefox Extended Support Release 91.7.0 ESR bsc1196900: - CVE-2022-26383: Browser window spoof using fullscree...

9.6CVSS6.7AI score0.00931EPSS
SaveExploits4References12
Tenable Nessus
Tenable Nessus
added 2022/03/15 12:0 a.m.36 views

SUSE SLES15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2022:0819-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0819-1 advisory. Firefox Extended Support Release 91.7.0 ESR bsc1196900: - CVE-2022-26383: Browser window spoof using fullscreen mode -...

9.6CVSS6.7AI score0.00931EPSS
SaveExploits4References12
Tenable Nessus
Tenable Nessus
added 2022/03/15 12:0 a.m.40 views

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2022:0822-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0822-1 advisory. Firefox Extended Support Release 91.7.0 ESR bsc1196900: - CVE-2022-26383: Browser window spoof using fullscreen mode -...

9.6CVSS6.7AI score0.00931EPSS
SaveExploits4References12
RedHat Linux
RedHat Linux
added 2022/03/14 10:48 a.m.8 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/03/14 10:30 a.m.9 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/03/14 10:7 a.m.6 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
Redos
Redos
added 2022/03/14 12:0 a.m.60 views

ROS-20220314-01

Vulnerability in Mozilla Firefox browser, related to a logic error in iframe processing. Exploitation the vulnerability could allow an attacker acting remotely and who has the ability to control the contents of an isolated iframe program environment , allow-popups, but not allow-scripts, could...

9.6CVSS7.9AI score0.00931EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2022/03/10 4:37 p.m.7 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/03/10 3:29 p.m.7 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/03/10 3:22 p.m.8 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/03/10 3:9 p.m.5 views

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS7.2AI score0.00655EPSS
SaveExploits0References4
Veracode
Veracode
added 2022/03/10 4:21 a.m.30 views

Window Browser Spoofing

firefox is vulnerable to browser window spoofing. The vulnerability exists when resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

4.3CVSS1.5AI score0.00655EPSS
SaveExploits0References6Affected Software6
RedhatCVE
RedhatCVE
added 2022/03/09 12:42 p.m.110 views

CVE-2022-26383

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification...

7.5CVSS1.7AI score0.00655EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/03/09 12:0 a.m.34 views

CVE-2022-26383

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

4.3CVSS6.7AI score0.00655EPSS
SaveExploits0References6
Mozilla
Mozilla
added 2022/03/08 12:0 a.m.276 views

Security Vulnerabilities fixed in Thunderbird 91.7 — Mozilla

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able to craft a link that, when clicked, would lead to JavaScript...

9.6CVSS1.7AI score0.00931EPSS
SaveExploits4References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/03/08 12:0 a.m.138 views

Mozilla Firefox < 98.0

The version of Firefox installed on the remote Windows host is prior to 98.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-10 advisory. - If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were abl...

9.6CVSS7.5AI score0.00931EPSS
SaveExploits5References8
Rows per page
Query Builder