Lucene search
+L

1434 matches found

Redos
Redos
added 2022/02/01 12:0 a.m.65 views

ROS-20220125-10

A vulnerability in the Node.js software platform is related to the formatting logic of the console.table function. Exploitation of the vulnerability could allow an attacker acting remotely to send a special request and assign an empty string to the prototype object's numeric keys A vulnerability ...

8.2CVSS6.8AI score0.21514EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Ubuntu: Security Advisory (USN-5246-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.0202EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2014-0552)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.7AI score0.09224EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2022/01/21 5:0 p.m.206 views

USN-5248-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a user into accepting unwanted permissions,...

10CVSS8AI score0.0383EPSS
SaveExploits8
OSV
OSV
added 2022/01/21 5:0 p.m.6 views

USN-5248-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a user into accepting unwanted permissions,...

10CVSS7.2AI score0.0383EPSS
SaveExploits8References45
Ubuntu
Ubuntu
added 2022/01/21 1:56 p.m.182 views

USN-5246-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct spoofing attacks, bypass security...

10CVSS8AI score0.0202EPSS
SaveExploits7
OpenVAS
OpenVAS
added 2022/01/12 12:0 a.m.41 views

Microsoft Windows Multiple Vulnerabilities (KB5009585)

This host is missing a critical security update according to Microsoft KB5009585 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.25019EPSS
SaveExploits3References3
OpenVAS
OpenVAS
added 2022/01/12 12:0 a.m.39 views

Microsoft Windows Multiple Vulnerabilities (KB5009624)

This host is missing a critical security update according to Microsoft KB5009624 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.25019EPSS
SaveExploits3References3
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.8 views

The vulnerability of Google Chrome’s command-line interface allows attackers to perform spear-phishing attacks.

The vulnerability of the Google Chrome browser’s command-line interface is related to the implementation or modification of arguments. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

5.5CVSS6.7AI score0.00263EPSS
SaveExploits0References4Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/01/03 12:0 a.m.40 views

Debian DSA-5034-1 : thunderbird - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5034 advisory. Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code, spoofing, information disclosure, downgrade...

10CVSS7.6AI score0.0383EPSS
SaveExploits0References52
CNVD
CNVD
added 2021/12/22 12:0 a.m.18 views

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2022-36976)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has a cross-site scripting vulnerability that stems from the fact that Firefox searches for text when a URL is received via the SEND intent, but subsequent use of the address bar can cause the URL to load...

6.1CVSS2.2AI score0.0051EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/12/21 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-5186-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.0202EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2021/12/20 10:35 p.m.97 views

USN-5186-2: Firefox regressions

USN-5186-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted...

7.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.11 views

PT-2021-6279 · Microsoft · Powershell

Name of the Vulnerable Software and Affected Versions: Microsoft PowerShell affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the PowerShell interpreter. Exploitation of this issue may allow an attacker to...

5.5CVSS6AI score0.0232EPSS
SaveExploits0References7
Veracode
Veracode
added 2021/12/12 6:18 a.m.21 views

Cross-site Scripting (XSS)

firefox:edge is vulnerable to cross-site scripting. When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects...

6.1CVSS1AI score0.0051EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/12/11 12:0 a.m.54 views

SUSE SLES11: MozillaFirefox / MozillaFirefox-translations-common / etc (SUSE-SU-2021:14859-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14859-1 advisory. Update to Extended Support Release 91.4.0 bsc1193485: - CVE-2021-43536: URL leakage when navigating while executing asynchronous function -...

8.8CVSS7AI score0.0202EPSS
SaveExploits0References21
Mageia
Mageia
added 2021/12/10 10:19 p.m.65 views

Updated firefox packages fix security vulnerability

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL CVE-2021-43536. An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash due to a heap...

9.8CVSS0.0202EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/10 10:19 p.m.7 views

MGASA-2021-0551 Updated firefox packages fix security vulnerability

Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL CVE-2021-43536. An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash due to a heap...

9.8CVSS8.7AI score0.0202EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2021/12/10 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-5186-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.0202EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/09 6:55 p.m.2 views

USN-5186-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct spoofing attacks, bypass CSP restrictions, or execute arbitrary cod...

8.8CVSS6.7AI score0.0202EPSS
SaveExploits0References11
Rows per page
Query Builder