Lucene search
+L

7106 matches found

Vulnrichment
Vulnrichment
•added 2025/10/16 6:52 a.m.•8 views

CVE-2025-62584

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...

5.8AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/16 6:52 a.m.•42 views

CVE-2025-62584

The Whale browser (Naver Whale Browser) versions prior to 4.33.325.17 are affected by an Origin Validation Error (CWE-346 ). This vulnerability allows an attacker to bypass the Same-Origin Policy (SOP) specifically within a dual-tab environment . Such a bypass could potentially lead to unauthoriz...

7.5CVSS5.8AI score0.00211EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•19 views

Naver Whale Browser 安全漏洞

Naver Whale Browser is a web browser from Naver, a South Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.33.325.17, which originates from an attacker being able to bypass the same-origin policy in a two-tab environme...

7.5CVSS5.8AI score0.00211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•3 views

CVE-2025-62584: Origin Validation Error

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...

7.5CVSS5.8AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•4 views

PT-2025-42430

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 4.33.325.17 Description A security issue exists in Whale browser that allows an attacker to bypass the Same-Origin Policy when a dual-tab environment is used. This bypass could potentially allow unauthorized...

7.5CVSS5.8AI score0.00211EPSS
SaveExploits0References8
Rockylinux
Rockylinux
•added 2025/10/10 5:50 a.m.•18 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

9.8CVSS6.6AI score0.00588EPSS
SaveExploits0
OSV
OSV
•added 2025/10/10 5:50 a.m.•10 views

RLSA-2025:16108 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary conditions in the...

7.5CVSS7.3AI score0.00754EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/10/10 12:00 a.m.•9 views

RockyLinux 9 : thunderbird (RLSA-2025:16156)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16156 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary...

8.8CVSS7.4AI score0.00754EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2025/10/09 12:00 a.m.•20 views

AlmaLinux 10 : firefox (ALSA-2025:16109)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:16109 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary...

8.8CVSS7.4AI score0.00754EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2025/10/07 9:47 a.m.•12 views

firefox: thunderbird: Same-origin policy bypass in the Layout component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue:...

6.5CVSS6.6AI score0.00302EPSS
SaveExploits0References6
Huntr
Huntr
•added 2025/10/07 8:15 a.m.•23 views

MLFlow server is exposed to data exfiltration and destruction due to lack of Origin validation

The MLFlow REST server is vulnerable to DNS rebinding attacks, allowing malicious websites to bypass Same-Origin Policy protections and execute unauthorized calls against REST endpoints. Once rebinding is successful, the attacker can: Query for experiments via the 2.0/mlflow/experiments/search...

8.1CVSS7.6AI score0.00218EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2010-0692

Malware in sbrugna...

6.8CVSS6.1AI score0.01592EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2009-0281

Malware in sbrugna...

5CVSS6.2AI score0.01124EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•7 views

EUVD-2009-3357

Malware in sbrugna...

4.3CVSS8AI score0.01674EPSS
SaveExploits1References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2010-2767

Malware in sbrugna...

4.3CVSS8.9AI score0.0159EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2010-1236

Malware in sbrugna...

4.3CVSS9.4AI score0.011EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2015-1894

Malware in sbrugna...

4.3CVSS5.8AI score0.13467EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2015-1433

Malware in sbrugna...

5CVSS7.7AI score0.0157EPSS
SaveExploits1References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2015-1409

Malware in sbrugna...

5CVSS8.1AI score0.02519EPSS
SaveExploits1References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2015-1351

Malware in sbrugna...

5CVSS8.1AI score0.01985EPSS
SaveExploits0References20
Rows per page
Query Builder