1218 matches found
CVE-2022-3656
Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
DEBIAN-CVE-2022-3316
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. Chromium security severity: Low...
CVE-2022-3316
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. Chromium security severity: Low...
UBUNTU-CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
UBUNTU-CVE-2022-3443
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. Chromium security severity: Low...
UBUNTU-CVE-2022-3316
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. Chromium security severity: Low...
CVE-2022-3444
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. Chromium security severity: Low...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser from Google, Inc. An input validation error vulnerability exists in Google Chrome prior to version 106.0.5249.62, which stems from insufficient data validation in the file system APIs, and can be exploited by a remote attacker to bypass file system restrictions via ...
Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞
Aruba Networks EdgeConnect Enterprise Orchestrator is a centralized SD-WAN management solution from Aruba Networks, Inc. It provides optimization, management, automation and real-time visibility and monitoring features for enterprise users. A security vulnerability exists in Aruba Networks...
The vulnerability of Fortinet’s antivirus software for FortiOS operating systems and Fortinet FortiClient for Mac security solutions stems from a flaw in the data protection mechanism. This flaw allows attackers to circumvent security restrictions.
The vulnerability of Fortinet’s antivirus software for FortiOS and Fortinet FortiClient for Mac operating systems is related to a flaw in the data protection mechanism when processing RAR archive files. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...
The vulnerability in the implementation of the scanning mechanism for Cisco AsyncOS operating systems in Cisco Secure Web Appliances (formerly known as “Cisco Web Security Appliances”) allows a perpetrator to circumvent security restrictions.
The vulnerability of the scanning mechanism implemented in Cisco AsyncOS operating systems for Cisco Secure Web Appliances formerly known as “Cisco Web Security Appliances” is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass securi...
USN-5689-1 perl vulnerability
It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature verification...
The vulnerability of Mozilla VPN’s network software, related to security configuration errors, allows a hacker to bypass security restrictions.
The vulnerability of Mozilla VPN’s network software is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS allows attackers to circumvent security restrictions.
The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings, allowing attackers to circumvent existing security restrictions.
The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings, which allow attackers to bypass existing security restrictions.
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
PT-2022-23756 · Mendix · Mendix Saml
Name of the Vulnerable Software and Affected Versions: Mendix SAML Mendix 7 compatible versions prior to V1.17.0 Mendix SAML Mendix 8 compatible versions prior to V2.3.0 Mendix SAML Mendix 9 compatible, New Track versions prior to V3.3.1 Mendix SAML Mendix 9 compatible, Upgrade Track versions pri...
CVE-2022-2622
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...