1316 matches found
Important: java-1.8.0-openjdk security, bug fix, and enhancement update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk 1.8.0.342.b07. BZ2084776 Security Fixes: OpenJDK: integer truncation issue in...
CVE-2022-1138: Improper Restriction of Rendered UI Layers or Frames
Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...
java-11-openjdk security, bug fix, and enhancement update
An update is available for java-11-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-11-openjdk packages provide the OpenJDK 11 Java Runtime...
CVE-2022-31234
Dell EMC PowerStore, contains an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are...
RHEL 8 : java-11-openjdk (RHSA-2022:5685)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5685 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...
RHEL 8 : java-11-openjdk (RHSA-2022:5684)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5684 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...
RHEL 8 : java-11-openjdk (RHSA-2022:5681)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5681 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...
CVE-2015-8031: Improper Restriction of XML External Entity Reference
Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...
CVE-2022-24689: Improper Restriction of Excessive Authentication Attempts
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages including personal data without being authenticated. The collected information includes the badge numbers that operate as user login...
PT-2022-3627
Name of the Vulnerable Software and Affected Versions X80 advanced RTU Communication Module versions V1.0 OPC UA Modicon Communication Module versions V1.10 and prior Description A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer issue exists that could cause denia...
Rockwell Automation MicroLogix
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: MicroLogix 1100/1400 Vulnerability: Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a...
CVE-2022-22496: Improper Restriction of Excessive Authentication Attempts
While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942...
CVE-2022-32285: Improper Restriction of XML External Entity Reference
A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. The affected module is vulnerable to XML External Entity XXE attacks due to...
PT-2022-7914
Name of the Vulnerable Software and Affected Versions Ucweb UC Browser version 11.2.5.932 Description A critical issue has been found in the HTML Handler component, where the manipulation of the title argument leads to improper restriction of rendered UI layers via a URL. This can be exploited...
CVE-2017-20041: Improper Restriction of Rendered UI Layers or Frames
A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers URL. It is possible to launch the attack remotely...
CVE-2022-30235
CVE-2022-30235 applies to Schneider Electric Wiser Smart and related EER21000/EER21001 devices (V4.5 and earlier). The vulnerability is CWE-307: Improper Restriction of Excessive Authentication Attempts, enabling brute‑force-style unauthorized access. The evidence indicates a network-based risk w...
CVE-2021-45981: Improper Restriction of XML External Entity Reference
NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...
Improper Restriction of Excessive Authentication Attempts in login feature
Description No rate limiting in login form leads to bruteforce attack Steps to reproduce 1.Go to http://localhost:/login 2.Login with wrong credentials 3.Capture POST request with Burp Suite and Send to Intruder 4.Create 100 null payloads and start attack 5.Noticed that all request return 200...
