Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 6:16 a.m.3 views

CVE-2024-49378

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS6.8AI score0.00295EPSS
Exploits0References1
OSV
OSV
added 2024/10/25 12:55 p.m.2 views

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS6.9AI score0.00295EPSS
Exploits0References4
CVE
CVE
added 2024/10/25 12:55 p.m.54 views

CVE-2024-49378

CVE-2024-49378 affects the smartUp browser extension for Edge and Firefox versions 7.2.622.1170. The root cause is a universal cross-site scripting flaw that lets another extension execute arbitrary code in the context of the user’s tab. The impact is arbitrary code execution within the tab; expl...

6.5CVSS6.2AI score0.00295EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/10/25 12:55 p.m.20 views

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS7AI score0.00295EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/25 12:55 p.m.22 views

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

6.5CVSS0.00295EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.2 views

smartUp 跨站脚本漏洞

smartUp is a customizable web browser mouse gesture extension from zimocode open source. A cross-site scripting vulnerability exists in smartUp version 7.2.622.1170, which stems from the presence of a cross-site scripting vulnerability that allows another extension to execute arbitrary code in th...

6.5CVSS6.6AI score0.00295EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.1 views

PT-2024-33492 · Smartup · Smartup

Name of the Vulnerable Software and Affected Versions: smartUp versions 7.2.622.1170 Description: The issue is a universal cross-site scripting problem that allows another extension to execute arbitrary code in the context of the user’s tab. No known patches exist for this issue. Recommendations:...

6.5CVSS6.9AI score0.00295EPSS
Exploits0References6
Rows per page
Query Builder