Lucene search
+L

7424 matches found

Fedora
Fedora
added 2024/11/20 2:4 p.m.15 views

[SECURITY] Fedora 39 Update: chromium-130.0.6723.116-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0
Citrix
Citrix
added 2024/11/19 12:0 a.m.11 views

Bidirectional Content Redirection: Local web browser window does not become foreground

The logic of Bidirectional Content Redirection feature is that if the URL is opened via a client-side redirect. Bidirectional Content Redirection feature is using the Microsoft API SetForegroundWindow directly to bring the window to the foreground, but it still doesn't work as expected in the...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2024/11/19 12:0 a.m.15 views

Ubuntu: Security Advisory (USN-7113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS6.6AI score0.0095EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/15 6:30 a.m.9 views

GHSA-PG82-9W35-3W3R FitNesse Cross-site scripting

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

6.1CVSS6.1AI score0.00407EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/11/15 6:30 a.m.16 views

FitNesse Cross-site scripting

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

6.1CVSS6.5AI score0.00407EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/11/15 6:15 a.m.16 views

CVE-2024-39610

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

6.1CVSS0.00407EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/15 5:26 a.m.63 views

CVE-2024-39610

CVE-2024-39610 is a cross-site scripting vulnerability in FitNesse releases prior to 20241026. The issue could allow an arbitrary script to run in the web browser of users consuming the affected software. The Connected documents confirm the vulnerability in FitNesse and note the fixed version as ...

6.1CVSS6.8AI score0.00407EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/15 5:26 a.m.10 views

CVE-2024-39610

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

6.1CVSS6.8AI score0.00407EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/15 5:26 a.m.16 views

CVE-2024-39610

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

6.1CVSS6.4AI score0.00407EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/11/15 5:26 a.m.20 views

CVE-2024-39610

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

6.1CVSS0.00407EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/15 12:0 a.m.58 views

CVE-2024-50983

CVE-2024-50983 affects FlightPath 7.5 with a Cross Site Scripting (XSS) vulnerability. The issue allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript in a user’s browser by submitting a malicious payload in the Last Name field of the Create/Edit Faculty/...

5.4CVSS6.1AI score0.00262EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/11/13 6:15 a.m.11 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS0.0029EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/13 5:49 a.m.67 views

CVE-2024-52268

The CVE-2024-52268 entry concerns the VK All in One Expansion Unit WordPress plugin. A stored cross-site scripting (CWE-79) vulnerability affects versions prior to 9.100.1.0, allowing an attacker to execute arbitrary JavaScript in a user’s browser when visiting a site using the vulnerable plugin....

4.8CVSS6.7AI score0.0029EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/11/13 5:49 a.m.16 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS0.0029EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/13 5:49 a.m.15 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS6.7AI score0.0029EPSS
SaveExploits0References2
Fedora
Fedora
added 2024/11/13 3:13 a.m.21 views

[SECURITY] Fedora 41 Update: chromium-130.0.6723.116-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0
Fedora
Fedora
added 2024/11/13 2:59 a.m.19 views

[SECURITY] Fedora 40 Update: chromium-130.0.6723.116-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0
OSV
OSV
added 2024/11/13 12:0 a.m.17 views

ALSA-2024:9554 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 firefox: thunderbird: History interface could have been used to cause a Denial of Servi...

9.8CVSS9AI score0.23184EPSS
SaveExploits1References24
OSV
OSV
added 2024/11/12 12:0 a.m.18 views

ALSA-2024:9325 Low: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Authenticated user can kill any process when enabling...

3.2CVSS3.5AI score0.00266EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2024/11/12 12:0 a.m.23 views

Low: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Authenticated user can kill any process when enabling...

3.2CVSS6.5AI score0.00266EPSS
SaveExploits0References4
Rows per page
Query Builder