Lucene search
+L

9952 matches found

osv_debian
osv_debian
•added 2022/09/26 4:15 p.m.•16 views

DEBIAN-CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

8.8CVSS8.2AI score0.0095EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2022/09/26 4:15 p.m.•21 views

DEBIAN-CVE-2022-2859

Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS8.2AI score0.00925EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/09/26 4:15 p.m.•20 views

UBUNTU-CVE-2022-3052

Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions...

8.8CVSS7.6AI score0.0096EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/09/26 4:15 p.m.•26 views

UBUNTU-CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

8.8CVSS7.3AI score0.0095EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/26 4:23 a.m.•35 views

Security Bulletin: Storwize V7000 Unified Fix Available for Code Injection via Command Line Interface and Graphical User Interface (CVE-2012-2163)

Abstract Storwize V7000 Unified has a vulnerability that allows the administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the Storwize V7000 Unified Command Line Interface and the Graphical User...

9CVSS6.5AI score0.02228EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/26 4:23 a.m.•27 views

Security Bulletin: IBM SONAS fix available for Cross Frame Scripting vulnerability via Graphical User Interface (CVE-2013-5376)

Abstract An issue in IBM SONAS allows remote attackers to access the system as an authorized administrative user. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-5376 DESCRIPTION: An error in the IBM SONAS Graphical User Interface results in a Cross Frame Scripting vulnerability which can be used...

4.3CVSS5.8AI score0.00931EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/26 4:23 a.m.•27 views

Security Bulletin: SONAS Fix Available for Code Injection via Command Line Interface and SONAS Graphical User Interface (CVE-2012-2163)

Abstract SONAS has a vulnerability that allows SONAS administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the SONAS Command Line Interface and the SONAS Graphical User Interface could be leveraged ...

9CVSS6.3AI score0.02228EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/25 8:45 p.m.•27 views

Security Bulletin: TADDM Web UI security vulnerabilities (CVE-2012-5939,CVE-2012-5942)

Abstract IBM Tivoli Application Dependency Discovery Manager has security vulnerabilities in Web User Interface Data Management Portal Content VULNERABILITY DETAILS: CVEID: CVE-2012-5939 DESCRIPTION: IBM Tivoli Application Dependency Discovery Manager is vulnerable to cross-site scripting, caused...

3.5CVSS6.4AI score0.00936EPSS
SaveExploits0Affected Software1
osv_debian
osv_debian
•added 2022/09/23 7:15 p.m.•10 views

DEBIAN-CVE-2022-32816

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing...

6.5CVSS7.1AI score0.08191EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/09/21 12:00 a.m.•18 views

Mozilla Firefox Information Representation Spear Phishing

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

5CVSS6.4AI score0.00686EPSS
SaveExploits1References9Affected Software3
NVD
NVD
•added 2022/09/20 8:15 p.m.•27 views

CVE-2022-37884

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in...

7.5CVSS0.00837EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/20 7:55 p.m.•43 views

CVE-2022-37884

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in...

7.7AI score0.00837EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/20 7:55 p.m.•112 views

CVE-2022-37884

CVE-2022-37884 describes a denial-of-service vulnerability in the ClearPass Policy Manager Guest User Interface . An unauthenticated attacker can send specific operations that render the guest interface unavailable. Affected versions are Aruba ClearPass Policy Manager 6.10.x (≤ 6.10.6) and 6.9.x ...

7.5CVSS7.5AI score0.00837EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/20 12:00 a.m.•13 views

CVE-2022-37884: Uncontrolled Resource Consumption

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in...

7.5CVSS7.1AI score0.00837EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/20 12:00 a.m.•26 views

PT-2022-24125 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.6 and below Aruba ClearPass Policy Manager versions 6.9.11 and below Description: A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated...

7.5CVSS7.4AI score0.00837EPSS
SaveExploits0References2
Kaspersky
Kaspersky
•added 2022/09/20 12:00 a.m.•43 views

KLA19255 SUI vulnerability in Microsoft System Center

A spoofing vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-37972 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Endpoint-Configuration-Manager CVE list...

7.5CVSS7.5AI score0.01898EPSS
SaveExploits0References3
Fedora
Fedora
•added 2022/09/16 1:40 a.m.•50 views

[SECURITY] Fedora 36 Update: kdiskmark-3.1.0-1.fc36

KDiskMark is an HDD and SSD benchmark tool with a very friendly graphical user interface. KDiskMark with its presets and powerful GUI calls Flexible I/O Tester and handles the output to provide an easy to view and interpret comprehensive benchmark result...

7.8CVSS7.6AI score0.0037EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/09/16 12:00 a.m.•23 views

Huawei EMUI and Huawei Magic UI buffer error vulnerabilities

Huawei EMUI is a mobile operating system based on Android development.Huawei Magic UI is a smart device operating system. Huawei EMUI and Magic UI have an out-of-bounds write vulnerability that can be exploited by an attacker to cause the system to reboot...

7.5CVSS6.9AI score0.00635EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2022/09/15 12:01 p.m.•12 views

OPENSUSE-SU-2022:10121-1 Security update for opera

This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to install and update VPN Pro app, when...

9.6CVSS9.6AI score0.05765EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/09/14 3:15 a.m.•18 views

CVE-2020-19586

Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI...

9CVSS5.8AI score0.01526EPSS
SaveExploits1References1
Rows per page
Query Builder