8805 matches found
Wi-Fi STATION SH-52A vulnerable to cross-site scripting
Overview Wi-Fi STATION SH-52A provided by NTT DOCOMO, INC. contains a cross-site scripting vulnerability CWE-79. Takayuki Sasaki of Yokohama National University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impac...
IBM QRadar SIEM 跨站脚本漏洞
IBM QRadar SIEM is a solution from IBM America that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. A cross-site...
Huawei Emui 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. a remote DoS vulnerability exists in Huawei Emui and Magic UI. An attacker could exploit the vulnerability to cause the application to exit unexpectedly...
Huawei HarmonyOS 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a data handling error. An attacker can exploit this vulnerability to cause a kernel crash...
Huawei Emui 注入漏洞
Huawei Emui is a mobile operating system developed on Android.Magic Ui is a mobile operating system developed on Android.An injection attack vulnerability exists in Huawei Emui and Magic UI. An attacker can exploit this vulnerability to affect service availability...
Huawei Emui 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. a remote DoS vulnerability exists in Huawei Emui and Magic UI. An attacker could exploit the vulnerability to cause the application to exit unexpectedly...
[SECURITY] Fedora 33 Update: js-jquery-ui-1.13.0-1.fc33
A curated set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript Library...
[SECURITY] Fedora 34 Update: js-jquery-ui-1.13.0-1.fc34
A curated set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript Library...
[SECURITY] Fedora 35 Update: js-jquery-ui-1.13.0-1.fc35
A curated set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript Library...
OPENSUSE-SU-2021:1489-1 Security update for opera
This update for opera fixes the following issues: Update to version 81.0.4196.31: - DNA-95733 Implement the “Manage” menu in card details view - DNA-95736 Update UI for paused card - DNA-95791 Crash at base::operator - DNA-95794 Sometimes the sidebar UI fails to load - DNA-95812 Retrieve cards in...
KLA12351 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use aft...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability of the Active Directory Federation Services (ADFS) service on Microsoft Windows operating systems, which allows attackers to perform spear-phishing attacks
The vulnerability of the Active Directory Federation Services ADFS for Microsoft Windows operating systems is related to information representation errors at the user interface level. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
CVE-2021-38982
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
PT-2021-7885 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 96.0.4664.45 Description: The issue is related to the Cast UI interface in Google Chrome, where errors in information representation by the user interface can be exploited. This can allow a remote attacker to...
CVE-2020-16152
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...
CVE-2021-26558
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0...
IBM Security SiteProtector System 跨站脚本漏洞
IBM Security SiteProtector System is a centralized management system from IBM USA. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or appliances. A security vulnerability exists in the IBM SiteProtector Appliance that allow...