cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2021-4138,https://securityvulnerability.io/vulnerability/CVE-2021-4138,Improved Host Header Security in Mozilla Geckodriver,"This vulnerability arises from inadequate validation of Host headers in Mozilla Geckodriver. It allows attackers to make requests using malicious host headers, potentially exposing the application to security risks. To mitigate this, Mozilla has improved host header checks to reject requests that are not directed to a known local hostname or IP address, or the hostname specified by the server.",Mozilla,Geckodriver,5.3,MEDIUM,0.0007099999929778278,false,,false,false,false,,,false,false,,2022-05-02T23:15:00.000Z,0 CVE-2020-15660,https://securityvulnerability.io/vulnerability/CVE-2020-15660,,"Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared request, lead to remote code execution.",Mozilla,Geckodriver,8.8,HIGH,0.001769999973475933,false,,false,false,false,,,false,false,,2021-07-20T11:24:16.000Z,0