136 matches found
CVE-2022-35716: Incorrect Authorization
IBM UrbanCode Deploy UCD 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360...
CVE-2022-35716
IBM UrbanCode Deploy UCD 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360...
Dnsmasq DNS Cache Poisoning
The vulnerability of the Dnsmasq DNS server is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute a DNS cache poisoning attack remotely...
WebGL Code Execution
The vulnerability of the API for 3D graphics in WebGL browsers like Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Palo Alto Networks Cortex XDR Agent 安全漏洞
Palo Alto Networks Cortex XDR Agent is an endpoint security software from Palo Alto Networks. A security vulnerability exists in the Palo Alto Networks Cortex XDR Agent that originates from security restrictions not being properly applied. An attacker could exploit the vulnerability to execute...
WebAuthentication Disclosure
The vulnerability of the WebAuthentication user authentication mechanism for Microsoft Edge and Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Information Disclosure
curl is vulnerable to information disclosure. The vulnerability exists due to improper security validations which allows an attacker to gain access to credentials of other servers...
Moxa MGate Man-in-the-Middle
The vulnerability of Microprogrammed Industrial Ethernet Switches Moxa MGate is related to incorrect security requirements. Exploiting this vulnerability can allow a remote attacker to execute a “Man-in-the-Middle” attack...
Google Chrome Virtual Keyboard Data Compromise
The vulnerability of the Virtual Keyboard component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...
WebShare Component Disclosure
The vulnerability of the WebShare component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose protected information through a specially created web page...
Google Chrome Microsoft Edge Data Compromise
The vulnerability of Autofill implementations in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to influence the integrity, accessibility, and confidentiality of data...
CVE-2021-39992
CVE-2021-39992 affects Huawei EMUI (Android-based) via a vulnerability in ACPU caused by a security privilege misconfiguration. The issue potentially allows code execution with high impact on confidentiality, integrity, and availability, given the CVSS 3.1 metrics (LOCAL access, LOW privileges re...
CVE-2021-39992: Incorrect Permission Assignment for Critical Resource
There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...
CVE-2021-44651
Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175...
CVE-2021-44651: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175...
WebAuthentication Disclosure
The vulnerability of the WebAuthentication user authentication mechanism of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...
Google Chrome Referer Disclosure
The vulnerability of the Referer component in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...
Shopify: Ability to Disable the Login Attempt of any Shopify Owner for 24 hrs (Zero_Click)
Hello Team, I Found a Bug in which Hacker Have Ability to Disable the Login Attempt of any Shopify Owner With ZeroClick Summary: ---------- Proof of Concept; ------------------- Credentials: ------------- Victim = ███████.com ████████ Hacker = █████████.com Victim Sceanrio: ----------------- Step...
Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.
Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...
