17636 matches found
CVE-2022-46880
A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.Note: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 105. This vulnerability affect...
CVE-2022-28287
In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox 99...
CVE-2022-26381
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...
text_helpers uses web link to untrusted target with window.opener access
A vulnerability was found in ahorner text-helpers 1.1.0/1.1.1. It has been declared as critical. This vulnerability affects unknown code of the file lib/texthelpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The...
CVE-2022-28287
In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox 99...
CVE-2022-43543
KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's...
+Message App improper handling of Unicode control characters
Overview +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links CWE-451. Akaki Tsunoda reported this vulnerability to IPA. JPCERT/CC...
CVE-2022-47512
CVE-2022-47512 affects SolarWinds Hybrid Cloud Observability / SolarWinds Platform 2022.4 (prior to 2022.4.1). The issue is that sensitive information was stored in plain text in a file accessible to a local-accoung user, leading to potential confidentiality impact (CVE-2022-47512). The CVSS cont...
UBUNTU-CVE-2022-43551
A vulnerability exists in curl 7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypasse...
CVE-2022-47512
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
CVE-2022-47512
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
Authentication flaw
Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...
whohas 安全漏洞
whohas is a command line tool from the whohas open source. whohas a security vulnerability , the vulnerability stems from the component Package Information Handler some unknown processing problems , which can lead to the transmission of sensitive information in clear text...
PT-2022-28066 · Solarwinds · Hybrid Cloud Observability +1
Name of the Vulnerable Software and Affected Versions: Hybrid Cloud Observability HCO/ SolarWinds Platform version 2022.4 Description: Sensitive information was stored in plain text in a file that is accessible by a user with a local account. Recommendations: For Hybrid Cloud Observability HCO/...
SolarWinds Platform 安全漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform version 2022.4 that stems from sensitive information being stored in plain text in a file that can be accessed by a...
The vulnerability of the xrdp_mm_process_rail_update_window_text() function on the XRDP server allows a hacker to execute arbitrary code.
The vulnerability of the xrdpmmprocessrailupdatewindowtext function on the XRDP server is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Shoplazza LifeStyle 跨站脚本漏洞
Shoplazza LifeStyle is an e-commerce website by Shoplazza, Inc. A security vulnerability exists in Shoplazza LifeStyle version 1.1, which stems from cross-site scripting due to incorrect manipulation of the parameters Subheading/Heading/Text/Button Text/Label...
Shoplazza LifeStyle 跨站脚本漏洞
Shoplazza LifeStyle is an e-commerce website by Shoplazza, Inc. A security vulnerability exists in Shoplazza LifeStyle version 1.1, which stems from incorrect manipulation of the parameter Text/Mobile Text resulting in cross-site scripting...
GLSA-202212-01 : curl: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202212-01 curl: Multiple Vulnerabilities - When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the...