Lucene search
+L

6133 matches found

OSV
OSV
added 2025/11/11 4:15 p.m.11 views

UBUNTU-CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS6.6AI score0.00257EPSS
SaveExploits0References8
OSV
OSV
added 2025/11/11 4:15 p.m.7 views

UBUNTU-CVE-2025-13019

Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS6.6AI score0.00257EPSS
SaveExploits0References8
CVE
CVE
added 2025/11/11 3:47 p.m.27 views

CVE-2025-13017

Mode C: CVE-2025-13017 is a same-origin policy bypass in the DOM: Notifications component, affecting Firefox before 145 (and ESR before 140.5) and Thunderbird before 145 (and ESR before 140.5). Connected advisories confirm this CVE alongside other Firefox DOM/JSWA issues and list concrete mitigat...

8.1CVSS7.2AI score0.00257EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/11/11 3:47 p.m.7 views

CVE-2025-13017

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS7.2AI score0.00257EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/11/11 3:47 p.m.5 views

CVE-2025-13017 Same-origin policy bypass in the DOM: Notifications component

Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

7.2AI score0.00257EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/11/11 3:47 p.m.3 views

CVE-2025-13019 Same-origin policy bypass in the DOM: Workers component

Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

7.2AI score0.00257EPSS
SaveExploits0References5
CVE
CVE
added 2025/11/11 3:47 p.m.46 views

CVE-2025-13019

CVE-2025-13019 is a same-origin policy bypass in the DOM: Workers component. Connected advisories confirm affected products as Mozilla Firefox and Firefox ESR, with impact on versions below Firefox 145 and Firefox ESR below 140.5. The Amazon Linux advisories (ALAS2-2025-3108, ALAS2FIREFOX-2025-04...

8.1CVSS7.2AI score0.00257EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/11/11 3:47 p.m.13 views

CVE-2025-13019

Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS7.2AI score0.00257EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/11/11 12:00 a.m.6 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR due to a same-origin policy bypass in the DOM:Notifications component. An attacker can exploit this...

8.1CVSS6.2AI score0.00257EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.10 views

PT-2025-46357

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Description A same-origin policy bypass exists within the DOM Notifications component. This allows for potential unauthorized access or manipulation of data due to insufficient...

9.1CVSS6.6AI score0.00269EPSS
SaveExploits0References466
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.9 views

PT-2025-46359

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Description A same-origin policy bypass exists in the DOM: Workers component. This allows for potential unauthorized access or manipulation of data due to insufficient...

9.1CVSS6.6AI score0.00659EPSS
SaveExploits0References466
CNNVD
CNNVD
added 2025/11/11 12:00 a.m.7 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox and Firefox ESR due to a same-origin policy bypass in the DOM:Workers component. An attacker can exploit this...

8.1CVSS6.2AI score0.00257EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/11/11 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-13019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

8.1CVSS6.7AI score0.00257EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/03 12:00 a.m.3 views

FreeBSD : Firefox -- Same-origin policy bypass (944d968c-b808-11f0-8016-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 944d968c-b808-11f0-8016-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1970490 reports: Same-origin policy bypass in the Layout...

6.5CVSS7.2AI score0.00302EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.9 views

Astra Linux – Vulnerability in Firefox, Thunderbird

Bypass of the same-origin policy in the Graphics:Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2...

8.1CVSS5AI score0.00247EPSS
SaveExploits0References3
Veracode
Veracode
added 2025/10/22 10:10 a.m.7 views

DNS Rebinding

Neo4j Cypher MCP is vulnerable to DNS Rebinding. The vulnerability is due to the MCP server trusting requests from rebinding hostnames, and attackers can lure users to a malicious website that rebinding succeeds on to bypass Same-Origin Policy and invoke tools against local Neo4j instances...

7.4CVSS6.4AI score0.00221EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/17 7:50 a.m.13 views

CVE-2025-62584

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...

7.5CVSS6.8AI score0.00197EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/16 9:30 a.m.9 views

EUVD-2025-34718

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...

7.5CVSS6.3AI score0.00197EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/16 7:15 a.m.7 views

CVE-2025-62584

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...

7.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/16 7:15 a.m.10 views

CVE-2025-62584

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...

7.5CVSS0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder