flock records
5 published records for vendor flock.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 20%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-20 Improper Input Validation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
17Monitor | CVE-2010-3202Proof of concept | Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crflock · flock · CWE-79 | Medium4.3 | — | 1.4% | Sep 13, 2010 |
17Monitor | CVE-2010-1236No exploit | The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flocgoogle · chrome · CWE-79 | Medium4.3 | — | 1.4% | Apr 1, 2010 |
17Monitor | CVE-2006-6954No exploit | Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nesflock · flock · CWE-20 | Medium4.3 | — | 1.3% | Jan 29, 2007 |
17Monitor | CVE-2010-3262No exploit | Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTflock · flock · CWE-79 | Medium4.3 | — | 1.0% | Sep 20, 2010 |
17Monitor | CVE-2009-3007No exploit | Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open witflock · flock | Medium4.3 | — | 0.6% | Aug 28, 2009 |
- CVE-2010-320217Monitor
Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a cr
MediumCVSS 4.3Proof of conceptEPSS 1%flock · flockSep 13, 2010
- CVE-2010-123617Monitor
The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Floc
MediumCVSS 4.3No exploitEPSS 1%google · chromeApr 1, 2010
- CVE-2006-695417Monitor
Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nes
MediumCVSS 4.3No exploitEPSS 1%flock · flockJan 29, 2007
- CVE-2010-326217Monitor
Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HT
MediumCVSS 4.3No exploitEPSS 1%flock · flockSep 20, 2010
- CVE-2009-300717Monitor
Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar, via window.open wit
MediumCVSS 4.3No exploitEPSS 1%flock · flockAug 28, 2009