HCL Digital Experience 输入验证错误漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. HCL Digital Experience suffers from an input validation error vulnerability that stems from an attacker being able to construct URLs to redirect users to untrusted sites...

CVE-2022-46695

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Visiting a website that frames malicious content may lead to UI...

The vulnerability of the Zoom video conferencing service, related to the use of open redirection, allows a hacker to execute arbitrary code.

The vulnerability of the Zoom video conferencing service relates to the use of open redirection. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious URL address...

CVE-2022-44262

creationtimestamp| type| source ---|---|--- 2022-12-01 07:30:43+00:00| seen| https://t.me/cibsecurity/53753 2023-11-11 04:39:24+00:00| seen| https://t.me/arpsyndicate/81 2025-08-22 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4vouy32n...

Tenda AC1200 跨站脚本漏洞

The Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 version 15.11.0.10, which stems from a stored cross-site scripting issue. The vulnerability allows an attacker to execute JavaScript code by leveraging the filter tabs specifically the URL...

dotCMS 跨站脚本漏洞

dotCMS is a content management system CMS from the United States dotCMS. The system supports modules such as RSS feeds, blogs, and forums, and is easy to extend and build. A security vulnerability exists in dotCMS versions prior to 22.06, which stems from a vulnerability that allows a remote...

UBUNTU-CVE-2022-3483

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2. A malicious maintainer could exfiltrate a Datadog integration's access token by modifying the...

PT-2022-25735 · Sap · Sap Netweaver Abap Server +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform affected versions not specified Description: The issue allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being...

CVE-2022-38164

A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attack with URL spoofing as the browser only display certain part of the entire URL...

F-Secure Safe Browser 安全漏洞

F-Secure Safe Browser is an Internet security browser from Finnish company Fen Secure F-Secure. It is used to block viruses, Trojans, ransomware and other threats in real time. A security vulnerability exists in F-Secure Safe Browser that originates from a maliciously crafted website that may...

Avaya Scopia Pathfinder 访问控制错误漏洞

Avaya Scopia Pathfinder is a complete firewall and NAT traversal solution from Avaya USA. An Access Control Error vulnerability exists in Avaya Scopia Pathfinder version 8.3.7.0.4, which originates from a compromised access control in user authentication, allowing an unauthenticated, remote...

PT-2022-24254 · Avaya · Avaya Scopia Pathfinder

Name of the Vulnerable Software and Affected Versions: Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 Description: The issue allows remote unauthenticated attackers to bypass the login page, access sensitive information, and reset user passwords via URL modification. This is a result of...

The vulnerability of the performance.getEntries() method in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the performance.getEntries method in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a remote attacker to obtain URL records from various...

Bosch VIDEOJET multi 4000 跨站脚本漏洞

Bosch VIDEOJET multi 4000 is a 16-channel CCTV video encoder from Bosch. It provides best-in-class IP video performance for security camera systems. A security vulnerability exists in the Bosch VIDEOJET multi 4000 version, which stems from an error in the URL handler that could lead to reflective...

The vulnerability of the software interfaces of Cisco Webex Meetings Server and Cisco Webex Meetings allows a perpetrator to redirect users to any arbitrary URL address.

The vulnerability of Cisco Webex Meetings Server and Cisco Webex Meetings interfaces relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...

CVE-2022-43413

creationtimestamp| type| source ---|---|--- 2022-10-19 20:15:34+00:00| seen| https://t.me/cibsecurity/51809 2025-10-05 13:28:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2h7ashr75o2...

CVE-2022-41204

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack...

CVE-2022-26121

An exposure of resource to wrong sphere vulnerability CWE-668 in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via...

Cowell enterprise travel management system 跨站脚本漏洞

Cowell enterprise travel management system Cowell information enterprise travel management system is a China Cowell information Cowell company's enterprise travel management system. The Cowell enterprise travel management system suffers from a cross-site scripting vulnerability that stems from...

Mozilla: Data-race when parsing non-UTF-8 URLs in threads

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that concurrent use of the URL parser with non-UTF-8 data was not thread-safe, leading to a use-after-free problem and causing a potentially exploitable crash...