CVE-2021-38895

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

Cross site scripting

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

MediaWiki 跨站请求伪造漏洞

MediaWiki is a free, free-to-use web-based wiki engine from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.A cross-site request forgery vulnerability exists in MediaWiki, which stems from a failure of the product's...

Krisp: Error Page Content Spoofing or Text Injection

Summary: Error Page Content Spoofing or Text Injection in two urls Target: https://download.prelive.krisp.ai/ Target:https://upld.prelive.krisp.ai/ Description: Content spoofing, also referred to as content injection, "arbitrary text injection" or virtual defacement, is an attack targeting a user...

CVE-2021-38895

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

PT-2022-11136 · Unknown · Bone Voice Id Trusted Application

Name of the Vulnerable Software and Affected Versions: bone voice ID trusted application TA affected versions not specified Description: The bone voice ID trusted application TA has a heap overflow issue. Successful exploitation of this issue may affect data confidentiality. Recommendations: At t...

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2022-14710)

IBM Business Automation Workflow is a suite of workflow automation solutions from IBM USA. The product is mainly used for workflow management, compliance management, and features workflow visibility and scalability. A cross-site scripting vulnerability exists in IBM Business Automation Workflow,...

UBUNTU-CVE-2021-38576

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system...

Tianocore EDK II 安全漏洞

Tianocore Edk2 is a cross-platform firmware development environment from the Tianocore community that follows the UEFI and PI specifications.Tianocore EDK II contains a security vulnerability that can be exploited by attackers to permanently block TPM in a number of ways, as well as non-permanent...

CVE-2021-38876

IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404...

Avast antivirus elevation of privilege vulnerability (CNVD-2022-06878)

Avast antivirus is a suite of antivirus software from the Czech company Avast, and an elevation of privilege vulnerability exists in versions prior to Avast Antivirus 20.4, which could be exploited by an attacker to "hollow out" a trusted process to gain elevated privileges and bypass Avast's sel...

showdoc Cross-site Request Forgery Vulnerability (CNVD-2022-02730)

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site request forgery vulnerability, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to...

CVE-2021-38961

IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...

CVE-2021-38961

IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...

Cross site scripting

IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049...

CVE-2021-38961

CVE-2021-38961 affects IBM OPENBMC OP910 with a cross-site scripting vulnerability arising from insufficient input validation/output handling in the Web UI. Impacted component: web server/UI where malicious JavaScript could be embedded, potentially leading to credentials disclosure within a trust...

CVE-2021-45339

Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense...

CVE-2021-45339

Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense...

Privilege escalation

Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense...

Avast antivirus 安全漏洞

Avast antivirus is a suite of antivirus software from the Czech company Avast, and an elevation of privilege vulnerability exists in versions prior to Avast Antivirus 20.4, which could be exploited by an attacker to "hollow out" a trusted process to gain elevated privileges and bypass Avast's sel...