4310 matches found
SUSE: Security Advisory (SUSE-SU-2022:4620-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-36315
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox 103...
CVE-2022-36316
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox 103...
DEBIAN-CVE-2022-31742
An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between invalid key handles and cross-origin key handles. This could have led to cross-origin account linking in violation of WebAuthn goals. This vulnerability affec...
CVE-2022-42927
A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...
CVE-2022-36315: Insufficient Verification of Data Authenticity
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox 103...
Stored XSS in multiple menus
Description The demo website is affected of stored XSS at multiple menus. Proof of Concept 01 1. Access to the demo website http://demos4.softaculous.com/ 2. Login with admin user they provide, press on menu Uploader, in Uploader tab, try to upload whichever file then choose Media manager tab. 3...
CVE-2022-43872
IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information e.g. event log entries about the FTM SWIFT system. IBM X-Force ID: 239708...
PT-2022-27038 · Ibm · Ibm Financial Transaction Manager
Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager version 3.2.4 Description: The issue concerns incorrect authorization checks for certain HTTP requests, allowing unauthorized access to technical information, such as event log entries, about the FTM SWIFT...
Updated golang packages fix security vulnerability
net/http: limit canonical header cache by bytes, not entries bsc1206135 CVE-2022-41717...
CVE-2022-39924
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
Update 15.17 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.17.49440, Platform Build 15.0.49431)
None None...
CVE-2022-45515
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...
CVE-2022-45515
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...
CVE-2022-45515: Out-of-bounds Write
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...
CVE-2022-45515
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...
CVE-2022-45515
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the entries parameter at /goform/addressNat...
PT-2022-27557 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the entries parameter at the "/goform/addressNat" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...
Pywirt - Python Windows Incident Response Toolkit
With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via winrm. Features Information is collected in the following contents. IP Configuration Users Groups Tasks Services Task Scheduler Registry Control Active TCP &...
XWiki Platform security vulnerabilities
XWiki Platform is the French company XWiki's set of Wiki platform for creating Web collaboration applications. An input validation error vulnerability exists in XWiki Platform that stems from not properly clearing obfuscated entries. An attacker could exploit this vulnerability to obtain encrypte...