The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Mozilla
Information Disclosure
High Resolution Time Api
NVD
CVSS 3.1
3.7
EPSS
0.6%
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.
Information Disclosure
Buf Pl
NVD
GitHub
CVSS 3.0
3.3
EPSS
0.1%