Lucene search
+L

8192 matches found

CNVD
CNVD
•added 2025/04/09 12:00 a.m.•23 views

Zoo Management System aboutus.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter pagetitle of the aboutus.php file. An attacker can exploit this vulnerability to execu...

9.8CVSS8.1AI score0.00562EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/03 3:32 p.m.•24 views

CVE-2025-31121

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1...

7CVSS6.4AI score0.1735EPSS
SaveExploits1References1
osv_bit
osv_bit
•added 2025/04/03 2:07 p.m.•16 views

BIT-DOLIBARR-2024-55228

A cross-site scripting XSS vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter...

9CVSS6.1AI score0.00718EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/04/03 12:37 p.m.•18 views

CVE-2025-3035

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137...

5.3CVSS6AI score0.00291EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/04/02 1:29 p.m.•16 views

SUSE CVE-2025-3035

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137...

5.3CVSS6AI score0.00291EPSS
SaveExploits0References4
Mend
Mend
•added 2025/04/01 2:53 p.m.•8 views

CVE-2025-31121

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1...

7CVSS0.1735EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2025/04/01 1:15 p.m.•76 views

CVE-2025-3035

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability affects Firefox 137...

5.3CVSS6.1AI score0.00291EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/01 1:15 p.m.•12 views

CVE-2025-3035

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability affects Firefox 137...

5.3CVSS5.8AI score0.00291EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/04/01 1:15 p.m.•35 views

UBUNTU-CVE-2025-3035

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137...

5.3CVSS6.7AI score0.00291EPSS
SaveExploits0References5
CVE
CVE
•added 2025/04/01 12:29 p.m.•118 views

CVE-2025-3035

Mozilla Firefox (including Firefox-ESR ) is affected by a vulnerability where the document title of a previous tab leaks into an AI chatbot prompt. This occurs when a user interacts with the chatbot in one tab and subsequently activates it in another tab. This flaw affects versions prior to 137 ....

5.3CVSS6.5AI score0.00291EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/04/01 12:29 p.m.•44 views

CVE-2025-3035 Tab title disclosure across pages when using AI chatbot

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137...

0.00291EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/04/01 12:29 p.m.•71 views

CVE-2025-3035

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137...

5.3CVSS5.6AI score0.00291EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•6 views

CVE-2025-3035: Exposure of Private Personal Information to an Unauthorized Actor

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137...

5.3CVSS6.5AI score0.00291EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•20 views

PT-2025-14119 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.1 Description: The Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. Recommendations: For versions prior to 7.0.3.1, update to version 7.0.3.1 to...

7CVSS6.5AI score0.1735EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•5 views

CVE-2025-31121: Improper Neutralization of Input During Web Page Generation

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1...

7CVSS5.7AI score0.1735EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•20 views

PT-2025-14110

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Description The issue occurs when the AI chatbot is used in one tab and then activated in another tab, causing the document title of the previous tab to leak into the chat prompt. Recommendations For versions prio...

9.8CVSS6.5AI score0.00603EPSS
SaveExploits0References257
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•19 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 137, which stems from the fact that when an AI chatbot is activated in one tab after using another tab, the document title of the...

5.3CVSS5.2AI score0.00291EPSS
SaveExploits0References3
osv_cga
osv_cga
•added 2025/03/31 4:05 p.m.•12 views

CGA-J58X-92R5-P8FP

Bulletin has no description...

4.4CVSS7.2AI score0.00425EPSS
SaveExploits2
Snyk
Snyk
•added 2025/03/31 3:40 a.m.•13 views

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the Title argument. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious...

5.1CVSS5.3AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/03/31 1:40 a.m.•11 views

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the Title/Body Source/Button Text fields. An attacker can inject malicious scripts by crafting input that escapes the expected data...

5.1CVSS5.3AI score
SaveExploits0References2
Rows per page
Query Builder