Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-4138

geckodriver: DNS rebinding vulnerability

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mozilla
Products
Geckodriver
CVE-2020-15660

geckodriver: missing checks on Content-Type headers leads to CSRF

Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared request, lead to remote code execution.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Mozilla
Products
Geckodriver