Lucene search
+L

6 matches found

OSV
OSV
added 2024/12/05 1:15 p.m.6 views

CVE-2024-51549

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

9.4CVSS5.8AI score0.00543EPSS
SaveExploits0References1
HashiCorp Security Advisories
HashiCorp Security Advisories
added 2023/07/19 11:11 p.m.12 views

Nomad ACL Policies without Label are Applied to Unexpected Resources

Summary A vulnerability was identified in Nomad and Nomad Enterprise “Nomad” such an ACL policy using a block without label may be applied to unexpected resources. This vulnerability, CVE-2023-3072, affects Nomad from 0.7 up to 1.5.6 and 1.4.10 and was fixed in 1.6.0, 1.5.7, and 1.4.11. Backgroun...

4.1CVSS6AI score0.00433EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:22 a.m.9 views

SUSE CVE-2015-1125

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site...

4.3CVSS6.5AI score0.01446EPSS
SaveExploits0References3
OSV
OSV
added 2016/09/25 8:59 p.m.2 views

CVE-2016-5173

The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect...

7.1CVSS7.3AI score0.0102EPSS
SaveExploits0References10
Prion
Prion
added 2016/09/25 8:59 p.m.32 views

Design/Logic Flaw

The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect...

6.8CVSS6.6AI score0.0102EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2015/04/10 2:59 p.m.19 views

UBUNTU-CVE-2015-1125

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site...

4.3CVSS5.8AI score0.01446EPSS
SaveExploits0References4
Rows per page
Query Builder