Lucene search
+L

15055 matches found

NVD
NVD
added 2023/11/23 10:15 p.m.26 views

CVE-2023-49214

Usedesk before 1.7.57 allows chat template injection...

9.8CVSS0.00826EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/23 10:15 p.m.22 views

Design/Logic Flaw

Usedesk before 1.7.57 allows chat template injection...

7.5CVSS7.6AI score0.00826EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/11/23 10:44 a.m.7 views

Malicious code in npm-base-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/11/23 10:44 a.m.11 views

MAL-2023-8600 Malicious code in npm-base-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd6b0cb182df5a8d0b8ec090754b8ebb6ad727eab4b962a671c5bd793cb031f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CVE
CVE
added 2023/11/23 12:00 a.m.39 views

CVE-2023-49214

CVE-2023-49214 affects Usedesk prior to version 1.7.57 and enables chat template injection. The vulnerability, described consistently across NVD/Red Hat/CNNVD listings, arises from template injection in chat functionality and scores as critical (CVSS 9.8: Network attack, no privileges required, n...

9.8CVSS9.6AI score0.00826EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/23 12:00 a.m.10 views

Usedesk Security Breach

Usedesk is a system for bookkeeping and processing applications from Usedesk, Inc. A security vulnerability exists in Usedesk versions prior to 1.7.57 that stems from the presence of a template injection vulnerability...

9.8CVSS7.1AI score0.00826EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/23 12:00 a.m.29 views

CVE-2023-49214

Usedesk before 1.7.57 allows chat template injection...

9.9AI score0.00826EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2023/11/21 3:15 p.m.76 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS6.6AI score0.00312EPSS
SaveExploits0
NVD
NVD
added 2023/11/21 3:15 p.m.33 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS0.00312EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/11/21 3:15 p.m.32 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS6.4AI score0.00312EPSS
SaveExploits0References3
Prion
Prion
added 2023/11/21 3:15 p.m.25 views

Design/Logic Flaw

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

5.8CVSS6.6AI score0.00312EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2023/11/21 2:28 p.m.81 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS5.9AI score0.00312EPSS
SaveExploits0
CVE
CVE
added 2023/11/21 2:28 p.m.73 views

CVE-2023-49061

CVE-2023-49061 concerns Firefox for iOS prior to version 120, where the Reader Mode fails to neutralize HTML tags, enabling an attacker to perform HTML template injection and potentially exfiltrate user information. Affected software: Firefox for iOS

6.1CVSS6AI score0.00312EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/21 2:28 p.m.11 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/11/21 2:28 p.m.41 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.3AI score0.00312EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/21 12:00 a.m.12 views

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox prior to version 120, which could allow an attacker to perform HTML template injection and steal user information via reader mode...

6.1CVSS6.6AI score0.00312EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/20 12:00 a.m.17 views

PT-2023-7113 · Mozilla · Firefox For Ios

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 120 Description: The issue is related to the Reader Mode in Firefox for iOS, where the browser fails to neutralize HTML tags, allowing an attacker to perform HTML template injection. This could enable a remot...

7.5CVSS6.4AI score0.00312EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2023/11/16 4:39 p.m.396 views

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description...

10CVSS9.4AI score0.99571EPSS
SaveExploits28
Tenable Nessus
Tenable Nessus
added 2023/11/16 12:00 a.m.40 views

Oracle Linux 9 : skopeo (ELSA-2023-6363)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6363 advisory. - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539...

9.8CVSS7.1AI score0.04561EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
added 2023/11/15 7:24 a.m.15 views

golang: html/template: improper handling of special tags within script contexts

A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00918EPSS
SaveExploits0References8
Rows per page
Query Builder