Approved changes feed: RSS · Atom

cpe:2.3:a:comodo:dragon:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorComodo (ae0f5a94-22c5-54dd-8ff5-a3476482174a)
ProductDragon (3e2969e2-7ccb-5608-8bba-67b1a15fb957)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8206 vulnerable 2026-06-03 15:13:43.128640 Comodo Dragon IP DNS Leakage Detector cross site scripting
LOW (3.1)
A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179. This affects an unknown part of the component IP DNS Leakage Detector. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-26T19:02:05.590Z
Updated: 2025-07-28T16:01:12.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8205 vulnerable 2026-06-03 15:13:43.127998 Comodo Dragon IP DNS Leakage Detector cleartext transmission
LOW (3.7)
A vulnerability, which was classified as problematic, has been found in Comodo Dragon up to 134.0.6998.179. Affected by this issue is some unknown functionality of the component IP DNS Leakage Detector. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-26T18:32:05.635Z
Updated: 2025-07-28T16:01:54.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8204 vulnerable 2026-06-03 15:13:43.126427 Comodo Dragon HSTS security check
LOW (3.1)
A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179. Affected by this vulnerability is an unknown functionality of the component HSTS Handler. The manipulation leads to security check for standard. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-07-26T15:32:05.723Z
Updated: 2025-07-28T16:02:30.834Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.