CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...

GNOME Shell: Information disclosure

Background GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. Description It was discovered that GNOME Shell incorrectly handled the login screen password dialog. Impact Please review the referenced CVE identifiers for...

Ubuntu 20.04 LTS : GNOME Shell vulnerability (USN-4464-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4464-1 advisory. It was discovered that GNOME Shell incorrectly handled the login screen password dialog. Sensitive information could possibly be exposed during user logout. Tenab...

USN-4464-1 gnome-shell vulnerability

It was discovered that GNOME Shell incorrectly handled the login screen password dialog. Sensitive information could possibly be exposed during user logout...

PT-2020-14627

Name of the Vulnerable Software and Affected Versions SICAM WEB firmware for SICAM A8000 RTUs versions prior to V05.30 Description A Cross-Site-Scripting XSS issue has been identified, where the login screen does not sufficiently sanitize input. This allows an attacker to generate specially craft...

Siemens SICAM A8000 RTU Cross-Site Scripting Vulnerability

The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energy supply. A cross-site scripting vulnerability exists in the Siemens SICAM A8000 RTU. The vulnerability is caused due to the login screen failing to...

CVE-2019-3588

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked...

CVE-2019-3588: Improper Privilege Management

Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked...

Design/Logic Flaw

In the login screens in agent and customer interface, Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: OTRS Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions...

CVE-2020-1769: Undefined Security Weakness

In the login screens in agent and customer interface, Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: OTRS Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions...

Halvotec Information Services RAQuest Input Validation Error Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An input validation error vulnerability exists in the login screen in Halvotec Information Services RAQuest version 10.23.10801.0. An attacker could exploit this...

CVE-2011-3622

A Cross-Site Scripting XSS vulnerability exists in the admin login screen in Phorum before 5.2.18...

CVE-2011-3622: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in the admin login screen in Phorum before 5.2.18...

PT-2020-7127

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.18 Description A Cross-Site Scripting XSS issue exists in the admin login screen. This allows for potential malicious script execution. Recommendations For versions prior to 5.2.18, update to version 5.2.18 or late...

Unspecified Vulnerability in Sangoma Technologies SBCs

The Sangoma Technologies SBC is a border session controller SBC from Sangoma Technologies, a Canadian company. A security vulnerability in Sangoma Technologies SBC version 2.3.23-119-GA can be exploited by an attacker to create privileged accounts on a system via the application's login screen...

CVE-2019-5946

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen...

CVE-2019-5946: URL Redirection to Untrusted Site

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen...

PT-2019-17887

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.2.4 through 4.10.1 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks, via the Login Screen. Recommendations For versions 4.2.4 through 4.10....

Code injection

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen...

Fedora 28 : 1:gdm (2018-6740c38cf4)

gdm 3.28.3 release, fixing CVE-2018-14424. - CVE-2018-14424 - double free fix - lifecycle fixes to libgdm/GdmClient - follow up fixes dealing with login screen reaping form last release - allow pam modules to use SIGUSR1 - set PWD for user session - tell cirrus not to use wayland - Translation...