Lucene search
K

74 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в firefox

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox 103...

4.3CVSS6.1AI score0.00158EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-2731

Malware in sbrugna...

9.8CVSS9.3AI score0.01448EPSS
Exploits0References18
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2022-39031

Malicious code in bioql PyPI...

4.3CVSS7.2AI score0.00158EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-1019

Malicious code in bioql PyPI...

7.5CVSS8AI score0.00949EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-1182

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00222EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30691

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00039EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.1 views

CVE-2025-57936

Missing Authorization vulnerability in Meitar Subresource Integrity SRI Manager wp-sri allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subresource Integrity SRI Manager: from n/a through = 0.4.0...

4.3CVSS5.9AI score0.00039EPSS
Exploits0References1
NVD
NVD
added 2025/09/22 7:15 p.m.1 views

CVE-2025-57936

Missing Authorization vulnerability in Meitar Subresource Integrity SRI Manager wp-sri allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subresource Integrity SRI Manager: from n/a through = 0.4.0...

4.3CVSS0.00039EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 7:12 p.m.2 views

WordPress Subresource Integrity (SRI) Manager Plugin <= 0.4.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin Subresource Integrity SRI Manager versions = 0.4.0...

4.3CVSS6.7AI score0.00039EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.7 views

CVE-2025-57936 WordPress Subresource Integrity (SRI) Manager Plugin <= 0.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Meitar Subresource Integrity SRI Manager wp-sri allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subresource Integrity SRI Manager: from n/a through = 0.4.0...

4.3CVSS0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.1 views

CVE-2025-57936 WordPress Subresource Integrity (SRI) Manager Plugin <= 0.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Meitar Subresource Integrity SRI Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Subresource Integrity SRI Manager: from n/a through 0.4.0...

4.3CVSS6.6AI score0.00039EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.8 views

CVE-2025-57936

CVE-2025-57936 — Affected: Subresource Integrity (SRI) Manager. The connected documents indicate a Missing Authorization vulnerability impacting SRI Manager versions from n/a up to and including 0.4.0. CVSS v3.1 base score 4.3 (Medium) with network attack vector, low privileges required, no user ...

4.3CVSS5.9AI score0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-38786

Name of the Vulnerable Software and Affected Versions Meitar Subresource Integrity SRI Manager versions through 0.4.0 Description An authorization issue exists in Meitar Subresource Integrity SRI Manager, allowing exploitation due to incorrectly configured access control security levels...

4.3CVSS6.7AI score0.00039EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.2 views

WordPress plugin Subresource Integrity (SRI) Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based servers....

4.3CVSS6.4AI score0.00039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:53 p.m.3 views

CVE-2022-36315

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox 103...

4.3CVSS6.3AI score0.00158EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:22 p.m.2 views

CVE-2020-15262

In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-lev...

5CVSS6.7AI score0.00159EPSS
Exploits0
OSV
OSV
added 2025/03/14 3:43 p.m.3 views

OESA-2025-1268 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of...

9.8CVSS9.8AI score0.53858EPSS
Exploits39References188
RedhatCVE
RedhatCVE
added 2025/02/05 9:31 a.m.5 views

CVE-2024-30250

Astro-Shield is an integration to enhance website security with SubResource Integrity hashes, Content-Security-Policy headers, and other techniques. Versions from 1.2.0 to 1.3.1 of Astro-Shield allow bypass to the allow-lists for cross-origin resources by introducing valid integrity attributes to...

7.5CVSS6.9AI score0.00222EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:59 a.m.3 views

CVE-2024-29896

Astro-Shield is a library to compute the subresource integrity hashes for your JS scripts and CSS stylesheets. When automated CSP headers generation for SSR content is enabled and the web application serves content that can be partially controlled by external users, then it is possible that the C...

7.5CVSS6.8AI score0.00949EPSS
Exploits0References1
NVD
NVD
added 2024/04/04 3:15 p.m.8 views

CVE-2024-30250

Astro-Shield is an integration to enhance website security with SubResource Integrity hashes, Content-Security-Policy headers, and other techniques. Versions from 1.2.0 to 1.3.1 of Astro-Shield allow bypass to the allow-lists for cross-origin resources by introducing valid integrity attributes to...

7.5CVSS7.7AI score0.00222EPSS
Exploits0References4
Rows per page
Query Builder