Results
18,349· Page 210/367Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed t
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability a
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a pot
Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed ev
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of
A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by sel
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be c
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilitie
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilitie
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilitie
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with larg
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed t
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript exe
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-m
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize a
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear
A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP f
Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.
ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CV
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is no
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity
An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API,
An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address t
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_rea
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42
Test your stack for 2020issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.