The vulnerability in the web interface for controlling microprogrammed software in Cisco IP Phones 6800, Cisco IP Phone 7800, and Cisco IP Phone 8800 allows a attacker to perform a CSRF attack.

The vulnerability of the web interface for controlling microprogrammed software in Cisco IP Phones 6800, 7800, and 8800 is related to insufficient verification of the HTTP request source. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web...

CVE-2021-32985 AVEVA System Platform Origin Validation Error

AVEVA System Platform versions 2017 through 2020 R2 P01 does not properly verify that the source of data or communication is valid...

The vulnerability of Google Chrome’s browser password managers allows attackers to expose protected information.

The vulnerability of Google Chrome’s browser password managers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to expose protected information.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

The vulnerability of Google Chrome browser downloads, related to a lack of mechanism for verifying the source, allows attackers to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome browsers relates to a lack of mechanisms for verifying the source of the download. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by using a specially created HTML page...

The vulnerability of Google Chrome’s compositing component allows a hacker to manipulate the URL bar’s content using a specially created HTML page.

The vulnerability of Google Chrome’s compositing component is related to a lack of mechanisms for verifying the source of the content. Exploiting this vulnerability could allow an attacker to manipulate the URL input by using a specially created HTML page...

The vulnerability of Google Chrome’s Navigation function, related to a lack of mechanism for verifying the source, allows attackers to manipulate the content of the address bar.

The vulnerability of Google Chrome’s Navigation function is related to a lack of mechanisms for verifying the source of the content. Exploiting this vulnerability could allow a malicious actor to manipulate the URL input by using a specially created HTML page...

UVI-2021-1001213 cgroup: verify that source is a string

cgroup: verify that source is a string This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit a41573667b39152176f6b08d10b4deb171e541c...

Design/Logic Flaw

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number SSN values via a brute-force attack on a sometimes hidden search field, because the last four SSN digits are part of the supported combination of search...

VerityStream MSOW Solutions 安全漏洞

VerityStream MSOW Solutions is an application from VerityStream, Inc. A medical system. An information disclosure vulnerability exists in Primary Source Verification in VerityStream MSOW Solutions versions prior to 3.1.1, which can be exploited by an attacker to discover the Social Security Numbe...

DEBIAN-CVE-2011-1070

v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences...

UBUNTU-CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

The vulnerability in the WebExtensions extension of the Mozilla Firefox browser allows a hacker to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the WebExtensions extension in the Mozilla Firefox browser is related to a lack of source verification mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its integrity, and cause service failures...

The vulnerability of the Mozilla Firefox browser, related to a lack of mechanism for verifying the source, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...