Vulnerabilities (CVE)

Filtered by CWE-451
Total 142 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-47044 2024-10-17 N/A 5.3 MEDIUM
Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.
CVE-2024-7529 1 Mozilla 3 Firefox, Firefox Esr, Thunderbird 2024-08-12 N/A 6.5 MEDIUM
The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.