CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

UBUNTU-CVE-2023-0136

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Chromium security severity: Medium...

Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

Malicious code in generic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f87fcdafcf972ad5460dfd5d8fca046c5d3c1545f8725f7dc18174de69c362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0015: Improper Neutralization of Input During Web Page Generation

In SAP BusinessObjects Business Intelligence Platform Web Intelligence user interface - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS...

CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

CVE-2023-21726: Storing Passwords in a Recoverable Format

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

KLA20155 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be...

KLA20150 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Network Service can be exploited to cause denial of...

CVE-2022-34330

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

pyload security vulnerability

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A security vulnerability exists in pyload versions prior to 0.5.0b3.dev33, which stems from an improper restriction in its rendering UI...

HUAWEI EMUI/Magic UI buffer error vulnerability

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from the HWKEYMASTER module...

CVE-2022-22352 IBM Sterling B2B Integrator Standard Edition cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

IBM Sterling B2B Integrator Cross-site Scripting Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1. An attacker could exploit the...

PT-2023-8312

Name of the Vulnerable Software and Affected Versions pyload versions prior to 0.5.0b3.dev33 Description The issue is related to improper restriction of rendered UI layers or frames in the pyload software, which can be exploited by a remote attacker to conduct a clickjacking attack. This allows t...

OPENSUSE-SU-2022:10254-1 Security update for opera

This update for opera fixes the following issues: - Update to 94.0.4606.38 - CHR-9133 Update chromium on desktop-stable-108-4606 to 108.0.5359.125 - DNA-103624 Create JS API to open Search tabs feature - DNA-104004 Improve welcome pop-up - DNA-104053 Right mouse click open speed dial instead of...

Oxidized Web cross-site scripting vulnerabilities

Oxidized Web is a Web UI + RESTful API for Oxidized. Oxidized Web suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameter toresearch can lead to cross-site scripting...

[SECURITY] Fedora 36 Update: insight-13.0.50.20220502-4.fc36

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...