Lucene search
+L

785 matches found

Positive Technologies
Positive Technologies
•added 2026/04/25 12:00 a.m.•19 views

PT-2026-46736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in Safe Browsing allows a remote attacker to bypass discretionary access control, which is a security mechanism that restricts access to objects based on...

7.8CVSS6.8AI score0.00185EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/03/24 12:00 a.m.•30 views

PT-2026-46757

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 149.0.7827.53 Description An inappropriate implementation in Safe Browsing allows a remote attacker to execute arbitrary code through the use of a malicious file. Recommendations Update to version...

9.4CVSS7.5AI score0.00218EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•11 views

MiracleLinux 9 : firefox-102.10.0-1.el9.ML.1 (AXSA:2023-5299:16)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5299:16 advisory. MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp Mozilla: Fullscreen notification obscured CVE-2023-29533 Mozilla: Potential Memory Corruption...

8.8CVSS7.4AI score0.00747EPSS
SaveExploits0References9
OSV
OSV
•added 2026/01/09 11:10 a.m.•13 views

OESA-2026-1042 kf5-messagelib security update

. Security Fixes: KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.CVE-2025-69412...

3.4CVSS6.8AI score0.00218EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/09 11:10 a.m.•36 views

OESA-2026-1040 kf5-messagelib security update

. Security Fixes: KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.CVE-2025-69412...

3.4CVSS6.8AI score0.00218EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/09 11:10 a.m.•29 views

OESA-2026-1041 kf5-messagelib security update

. Security Fixes: KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.CVE-2025-69412...

3.4CVSS6.8AI score0.00218EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/09 11:10 a.m.•48 views

OESA-2026-1039 kf5-messagelib security update

. Security Fixes: KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.CVE-2025-69412...

3.4CVSS6.8AI score0.00218EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 8:55 a.m.•17 views

CVE-2018-4031

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safe browsing function parses HTTP requests. The server hostname is extracted from captured HTTP/HTTPS requests and inserted as part of a Lua statement without...

10CVSS6.9AI score0.02669EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2026/01/06 12:23 a.m.•13 views

SUSE CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS6.9AI score0.00218EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/01 11:40 a.m.•12 views

CVE-2025-69412

A flaw was found in messagelib. This vulnerability allows a remote attacker to spoof threat data by exploiting the component's failure to properly validate SSL certificates when communicating with the Google Safe Browsing Lookup API. This could lead to malicious content bypassing security checks...

3.4CVSS6.4AI score0.00218EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/01 12:31 a.m.•18 views

EUVD-2025-206095

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS6.3AI score0.00218EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/01 12:15 a.m.•31 views

DEBIAN-CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS5.2AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/01 12:15 a.m.•21 views

CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS0.00218EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/01/01 12:15 a.m.•14 views

CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS5.8AI score0.00218EPSS
SaveExploits0References6
OSV
OSV
•added 2026/01/01 12:15 a.m.•8 views

UBUNTU-CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS5.8AI score0.00218EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/01 12:00 a.m.•2 views

CVE-2025-69412: Improper Certificate Validation

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS6.2AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/01 12:00 a.m.•23 views

messagelib 信任管理问题漏洞

messagelib is a KDE open source application. A small C library for Linux. A trust management issue vulnerability exists in versions prior to messagelib 25.11.90, which stems from an SSL error that ignores the Google Safe Browsing Lookup API, which could lead to threat data spoofing...

3.4CVSS6.3AI score0.00218EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/01 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-69412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of...

3.4CVSS6.1AI score0.00218EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/31 11:20 p.m.•10 views

CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS6.5AI score0.00218EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2025/12/31 11:20 p.m.•35 views

CVE-2025-69412

KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration...

3.4CVSS6.9AI score0.00218EPSS
SaveExploits0References4
Rows per page
Query Builder