2524 matches found
CVE-2022-32173
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
Input validation
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
CVE-2022-32173 OrchardCore - HTML Injection
In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users...
PT-2022-26107 · Tauri · Tauri
Name of the Vulnerable Software and Affected Versions: Tauri versions prior to 1.0.7 Tauri versions prior to 1.1.2 Description: The issue is related to an Incorrectly-Resolved Name, where incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionalit...
Sparx Systems Enterprise Architect 安全漏洞
Sparx Systems Enterprise Architect is an OMG UML-based visual modeling and design tool from Sparx Systems, Australia. A security vulnerability exists in Sparx Systems Enterprise Architect version 16.0.1605, which stems from the Find parameter of the Select Classifier dialog box that allows SQL...
The vulnerability of the dialog window, the call-response OPC-server WorkstationST, allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the dialog window, the call-response OPC-server WorkstationST, is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
General Electric WorkstationST 安全漏洞
General Electric WorkstationST is an alarm viewer in a software suite from General Electric, USA. A security vulnerability exists in General Electric WorkstationST versions prior to 07.09.15 that stems from an HTTP response splitting vulnerability in the AM Gateway Challenge-Response dialog. An...
CVE-2022-1989
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...
CVE-2022-1989
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...
Information disclosure
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...
CODESYS 安全漏洞
CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS Visualization versions prior to V4.2.0.0, which originates from a login dialog box that is susceptible to information disclosure and can be exploited by an attacker to...
PT-2022-14241 · 3S Smart Software Solutions · Codesys Visualization
Name of the Vulnerable Software and Affected Versions: CODESYS Visualization versions prior to V4.2.0.0 Description: The issue allows a remote, unauthenticated attacker to enumerate valid users due to information exposure in the login dialog. Recommendations: For versions prior to V4.2.0.0, updat...
PT-2022-4457 · Unknown · Workstation
Name of the Vulnerable Software and Affected Versions: WorkstationST versions prior to 07.09.15 Description: The issue is related to an HTTP response splitting vulnerability in the AM Gateway Challenge-Response dialog of WorkstationST. This vulnerability could allow a remote attacker to compromis...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
Design/Logic Flaw
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
CVE-2022-36220 affects Safe Exam Browser for Windows prior to version 3.4.0. The issue is a kiosk breakout vulnerability that allows code execution via the browser’s print dialog when no quit password is required. Root cause: UI/workflow flaw enabling escape from the kiosk environment through the...
Safe Exam Browser 安全漏洞
Safe Exam Browser is a secure web browser environment organized by ETH Zurich, Switzerland. It allows secure online exams to be taken. A security vulnerability exists in Safe Exam Browser Windows versions prior to 3.4.0 that originates from a kiosk breakout no exit code and allows an attacker to...