12800 matches found
CVE-2023-34064
Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information...
Privilege escalation
Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information...
CVE-2023-34064 Privilege Escalation Vulnerability
Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information...
CVE-2023-34064
CVE-2023-34064 affects VMware Workspace ONE Launcher. The issue is a privilege escalation via the Edge Panel feature that, with physical access, could bypass setup and expose sensitive information. Public sources describe it as a privilege escalation vulnerability in Workspace ONE Launcher, with ...
PT-2023-7785 · Vmware · Workspace One Launcher
Name of the Vulnerable Software and Affected Versions: Workspace ONE Launcher affected versions not specified Description: A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup and gain access to sensitive information. The...
VMware Workspace ONE Launcher Security Vulnerability
VMware Workspace ONE Launcher is an application from VMware, Inc. enables organizations across industries to easily lock down or share multi-user Android devices in single or multi-application mode. A security vulnerability exists in VMware Workspace ONE Launcher prior to version 23.11, which ste...
The vulnerability of the TXOne StellarOne centralized control panel of the TXOne StellarProtect industrial protection system, related to access control deficiencies, allows attackers to increase their privileges.
The vulnerability of the TXOne StellarOne centralized control panel of the TXOne StellarProtect industrial protection device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
FreeBSD : chromium -- multiple security fixes (4405e9ad-97fe-11ee-86bb-a8a1599412c6)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4405e9ad-97fe-11ee-86bb-a8a1599412c6 advisory. - Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote...
The vulnerability of the Search control function for the “Side Panel” in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the “Side Panel” control element search function in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Use After Free
Chromium is vulnerable to Use After Free. The vulnerability is due to improper memory management in Side Panel Search in Google Chrome. This allows an attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction...
Debian DSA-5573-1 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5573 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...
GHSA-GJJ8-M83C-QV9H Cross-site Scripting in evershop
Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...
Cross-site Scripting in evershop
Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...
CVE-2023-46499
Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...
CVE-2023-46499
Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...
CVE-2023-46499
Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...
Cross site scripting
Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel...
CVE-2023-46499
CVE-2023-46499 describes a Cross-Site Scripting vulnerability in EverShop NPM prior to version 1.0.0-rc.5. A remote attacker could obtain sensitive information by injecting crafted scripts into the Admin Panel. Affected versions: before 1.0.0-rc.5. Remediation per PT-2023-30059: update to 1.0.0-r...
typecho 跨站脚本漏洞
typecho is a PHP blogging platform for typecho personal developers that is simple and powerful. typecho 1.2.1 version of a cross-site scripting vulnerability, the vulnerability stems from the file /admin/options-theme.php on the lack of effective user-supplied data filtering and escaping, an...
EverShop Security Breach
EverShop is EverShop open source a NodeJS e-commerce platform. A security vulnerability exists in EverShop versions prior to 1.0.0-rc.5 that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability, which allows attackers to inject malicious code into the application's admin...