The vulnerability in the implementation of the scanning mechanism for Cisco AsyncOS operating systems in Cisco Secure Web Appliances (formerly known as “Cisco Web Security Appliances”) allows a perpetrator to circumvent security restrictions.

The vulnerability of the scanning mechanism implemented in Cisco AsyncOS operating systems for Cisco Secure Web Appliances formerly known as “Cisco Web Security Appliances” is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass securi...

USN-5689-1 perl vulnerability

It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature verification...

The vulnerability of Mozilla VPN’s network software, related to security configuration errors, allows a hacker to bypass security restrictions.

The vulnerability of Mozilla VPN’s network software is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS allows attackers to circumvent security restrictions.

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings, allowing attackers to circumvent existing security restrictions.

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings, which allow attackers to bypass existing security restrictions.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

PT-2022-23756 · Mendix · Mendix Saml

Name of the Vulnerable Software and Affected Versions: Mendix SAML Mendix 7 compatible versions prior to V1.17.0 Mendix SAML Mendix 8 compatible versions prior to V2.3.0 Mendix SAML Mendix 9 compatible, New Track versions prior to V3.3.1 Mendix SAML Mendix 9 compatible, Upgrade Track versions pri...

CVE-2022-2622

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...

CVE-2022-2162

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page...

DEBIAN-CVE-2022-1857

Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system restrictions via a crafted HTML page...

CVE-2022-1857

Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system restrictions via a crafted HTML page...

DEBIAN-CVE-2022-1500

Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a crafted HTML page...

UBUNTU-CVE-2022-1494

Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a crafted HTML page...

SonicWALL Hosted Email Security 安全特征问题漏洞

SonicWALL Hosted Email Security is an advanced cloud email security service from SonicWALL, Inc. A security feature issue vulnerability exists in SonicWall Hosted Email Security HES version 10.0.17.7319 and prior versions that stems from the incorrect implementation of certain security features i...

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

The vulnerability of Owl Labs Meeting Owl Pro’s microprogrammed software, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

The vulnerability of the REST API interface implementation in the software environment for the Zoho ManageEngine ServiceDesk Plus service allows a hacker to circumvent existing security restrictions.

The vulnerability of the REST API interface implementation for the Zoho ManageEngine ServiceDesk Plus technical support service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions from a...

The vulnerability of Zoom video conferencing software for Windows lies in the improper checking of the currently installed software version during updates. This allows a malicious individual to circumvent certain security restrictions.

The vulnerability of Zoom video conferencing software for Windows stems from improper checking of the currently installed software version during updates. Exploiting this vulnerability can allow a malicious actor to bypass certain security restrictions remotely...

The vulnerability of the core_auth class implementation in the virtual learning environment Moodle, which allows a hacker to circumvent security restrictions

The vulnerability of the coreauth class implementation in the virtual learning environment Moodle is related to deficiencies in limiting excessive authentication attempts. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...