Lucene search
K

14 matches found

OSV
OSV
added 2023/06/02 5:15 p.m.1 views

DEBIAN-CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

6.5CVSS6.8AI score0.00223EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2023/06/02 12:0 a.m.24 views

CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

6.5CVSS7.3AI score0.00223EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/06/02 12:0 a.m.22 views

CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

6.5CVSS7.3AI score0.00223EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:21 a.m.1 views

SUSE CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2023/01/25 3:30 p.m.5 views

Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/01/25 3:20 p.m.2 views

Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/01/23 10:5 a.m.2 views

Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/01/23 10:3 a.m.2 views

Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/01/23 9:23 a.m.2 views

Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/01/23 9:21 a.m.4 views

Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2023/01/19 12:6 p.m.37 views

CVE-2023-23603

The Mozilla Foundation Security Advisory describes this flaw as: Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser...

6.5CVSS3.4AI score0.00223EPSS
Exploits0References5
OSV
OSV
added 2023/01/18 12:0 a.m.0 views

UBUNTU-CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

6.5CVSS7.3AI score0.00223EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2023/01/18 12:0 a.m.25 views

CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

6.5CVSS6.8AI score0.00223EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2009/02/10 12:0 a.m.33 views

Microsoft Internet Explorer Malformed CSS Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists when processing, in XHTML strict mod...

9.3CVSS2.7AI score0.58479EPSS
Exploits1References1
Rows per page
Query Builder