598 matches found
CVE-2020-14534
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...
Design/Logic Flaw
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...
CVE-2020-14534
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...
CVE-2020-14534: Undefined Security Weakness
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...
Cross-site Scripting (XSS)
github.com/grafana/grafana is vulnerable to cross-site scripting XSS. The vulnerability exists as it was possible to introduce a malicious payload that will execute in a user's browser through annotation popups...
The vulnerability of the security interface of Google Chrome’s pop-up blockers allows attackers to compromise data integrity.
The vulnerability of the security interface of Google Chrome’s pop-up blockers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created HTML page...
Cross site scripting
An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. It is possible for an unauthenticated attacker to insert malicious JavaScript in several o...
The vulnerability of the FTP file transfer protocol in Firefox browsers allows a hacker to induce a service failure.
The vulnerability of the FTP file transfer protocol in Firefox browsers is related to an authentication error that occurs when modal pop-ups are displayed. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2018-16267
The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations. Such actions include the triggering system poweroff menu, and prompting a popup with arbitrary strings. This affects Tizen before...
The vulnerability of Google Chrome, related to the lack of checking for pop-up windows in full-screen mode, allows a hacker to replace the content of the Omnibox component (URL).
The vulnerability of Google Chrome lies in the lack of protection when processing pop-up windows in full-screen mode. Exploiting this vulnerability allows a remote attacker to replace the content of the Omnibox component URL using a specially created HTML page...
CVE-2019-11084
GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies...
UBUNTU-CVE-2018-17477
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
CVE-2018-17477
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
Design/Logic Flaw
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
CVE-2018-17477
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
chromium-browser: UI spoof in Extensions
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page...
Google Chrome Extensions UI Spoofing Vulnerability
Google Chrome is a web browser developed by Google, Inc.Extensions is one of the browser extensions. A security vulnerability exists in Extensions in Google Chrome versions prior to 70.0.3538.67. The vulnerability can be exploited by remote attackers to spoof the contents of an extension pop-up...
'HoeflerText' Popups Target Browsers With RAT and Locky Ransomware
A malware campaign utilizing bogus popups that alert users to a missing web-font is targeting Google Chrome and Firefox browser users. The popups contain a malicious JavaScript file that initiates the download of either the NetSupport Manager remote access tool RAT or Locky ransomware. The...
Signed Mughthesec Adware Hijacking Macs for Profit
A variant of an older piece of adware built for Macs called OperatorMac has been seen in the wild, and while like most adware it tries to turn a profit, it also illustrates some defensive shortcomings native to Apple’s ecosystem and the industry. Components of the new strain, which is called...
Reflective XSS Cross-Site Scripting Vulnerability in TRS WCM Content Collaboration Platform
The TRS WCM Content Collaboration Platform TRS WCM is a content management system. The TRS WCM Content Collaboration Platform suffers from a reflected XSS cross-site scripting vulnerability. The UserName fails to effectively filter user-submitted data, allowing an attacker to construct XSS...