2085 matches found
CVE-2023-23464 Media CP Media Control Panel – Information Disclosure
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...
Dell SupportAssist for Home PCs Information Disclosure Vulnerability
Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...
MediaCP Media Control Panel 安全漏洞
MediaCP Media Control Panel is an innovative audio and video network control panel for streaming media service providers from MediaCP, Inc. A security vulnerability exists in MediaCP Media Control Panel that stems from a Permissive Flash cross-domain policy that could allow information disclosure...
CVE-2023-23464 Media CP Media Control Panel – Information Disclosure
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...
CVE-2023-23464
CVE-2023‑23464 concerns Media CP Media Control Panel. A Permissive Flash cross‑domain policy may allow information disclosure, constituting a confidentiality risk (C/H) with no explicit exploitation status or remediation details provided in the supplied documents. Affected software/component: Med...
CVE-2022-34366
Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...
CVE-2022-34366
Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...
CVE-2022-34366
Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...
CVE-2022-34366
Dell SupportAssist for Home PCs (versions 3.11.2 and prior) contains an Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit this to obtain sensitive information. This CVE (CVE-2022-34366) is supported by multiple repositories documenti...
CVE-2022-34366
Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...
Dell SupportAssist for Home PCs 安全漏洞
Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...
jquery: Cross-site scripting via cross-domain ajax requests
jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...
jquery: Cross-site scripting via cross-domain ajax requests
jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...
jquery: Cross-site scripting via cross-domain ajax requests
jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...
jquery: Cross-site scripting via cross-domain ajax requests
jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...
USN-5816-1 firefox vulnerabilities
Niklas Baumstark discovered that a compromised web child process of Firefox could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. An attacker could potentially exploits this to obtain sensitive information. CVE-2023-23597 Tom...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2023-06856)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that stems from the fact that the performance API does not properly hide whether a redirect is noted for requesting a cross-domain...
USN-5782-2 firefox regressions
USN-5782-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use th...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2023-59952)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that stems from a Securitypolicyviolation event that could disclose cross-domain URLs, which could be exploited by an attacker to...
USN-5709-2 firefox vulnerabilities
USN-5709-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted...