Cisco Webex Meetings Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21354

CVE-2022-21354 affects Oracle E-Business Suite iStore UI (versions 12.2.3–12.2.11). An unauthenticated attacker can access over HTTP and, with user interaction, may update/insert/delete and read Oracle iStore data. The issue is confirmed by multiple sources (NVD, Red Hat, NCSC) and is listed with...

The vulnerability of the Thunderbird email client’s user interface, as well as the Firefox and Firefox ESR browsers, stems from incorrect restrictions on the number of visible layers or frames. This allows attackers to exploit these incorrect restrictions to perform unauthorized actions.

The vulnerability of the Thunderbird email client’s user interface, as well as the Firefox and Firefox ESR browsers, is related to an incorrect limitation on the number of visible layers or frames, due to a mistake in adjusting the size of the pop-up window when requesting full-screen access...

PT-2022-12973 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 14.4.5 GitLab versions 14.5.0 through 14.5.3 GitLab versions 14.6.0 through 14.6.1 Description: An issue has been discovered in GitLab where it does not ignore replacement references with git sub-commands. This allows...

CVE-2022-22290

Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from configuring in a...

The vulnerability of the Microsoft Office software package, related to errors in information presentation on the user interface, allows a hacker to carry out a spear-phishing attack.

The vulnerability of the Microsoft Office suite is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow an attacker to carry out a spear-phishing attack...

The vulnerability of the Office Online Server web server, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Office Online Server web server is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Vulnerability of Windows operating system certificates, allowing attackers to perform spoofing attacks

The vulnerability of Windows operating system certificates is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

CVE-2022-21870

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

CVE-2022-21870

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

CVE-2022-21870

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

CVE-2022-21870 Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

...

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

...

KLA12423 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service, spoof user interface. Below is a...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Tablet Windows User Interface with privilege license and access control issues. The following products and editions are affected:Windows 10 Version 21H...

KLA12420 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface. Below is a complete list of vulnerabilities: 1. Cross-site scripting XSS vulnerability in Microsoft Dynamics 365 Customer...

KLA12415 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges, cause denial of service, obtain sensitive information. Below is a complete list of...