17619 matches found
CVE-2022-45403
CVE-2022-45403 describes a vulnerability where Service Workers could infer the size of cross-origin media by correlating timing information with Range requests, potentially exposing presence/length of a media file. Affected: Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox
CVE-2022-34477
CVE-2022-34477 describes a vulnerability in Mozilla Firefox where the MediaError message could leak information for same-site cross-origin resources, enabling XS-Leaks. Affected product: Firefox earlier than 102. The underlying issue is inconsistent MediaError messaging, which could disclose sens...
PT-2022-15445 · Ibm · Ibm Security Verify Governance
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance, Identity Manager version 10.0.1 Description: The issue allows a local privileged user to read sensitive information, including user credentials, stored in plain clear text. Recommendations: For IBM Security...
CVE-2022-31746
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS 102...
CVE-2022-22744
CVE-2022-22744 affects Thunderbird for Windows via the DevTools Copy as curl feature, where the constructed curl command was not properly escaped for PowerShell, potentially allowing command injection when pasted into a PowerShell prompt. Public details indicate affected software includes Thunder...
CVE-2022-22760
CVE-2022-22760: A cross-origin information disclosure in Firefox/Thunderbird arises when importing resources via Web Workers, where error messages could reveal whether a response is JavaScript (application/javascript) or not. Affected: Firefox < 97, Thunderbird < 91.6, and Firefox ESR
A user can update information / password from other users
Description A user neither admin nor host can modify nickname, username and email from other users without permission, being a normal user. Steps to Reproduce 1. Login as user A here, called "ileana.maricel", HOST role. 2. In another browser login as user B called "ileana.mariceel", USER role. Co...
Forrester names Microsoft a Leader in Q4 2022 Security Analytics Platforms Wave report
We’re excited to announce that Microsoft is named a Leader in The Forrester Wave: Security Analytics Platforms, Q4 2022. Microsoft achieved the highest possible score in 17 different criteria, including partner ecosystem, innovation roadmap, product security, case management, and architecture. Wi...
CVE-2022-42945
DWG TrueView 2023 contains a DLL search order hijacking vulnerability leading to remote code execution (CVE-2022-42945). Root cause: DLL search order manipulation. Affected product: Autodesk DWG TrueView 2023. Evidence from multiple sources confirms the issue; exploitation is described as remote ...
Senayan Library Management System 9.1.1 SQL Injection
Title: Senayan Library Management System v9.1.1 a.k.a SLIMS 9 SQLi Author: nu11secur1ty Date: 11.09.2022 Vendor: https://slims.web.id/web/ Software: https://github.com/slims/slims9bulian/releases/download/v9.1.1/slims9bulian-9.1.1.zip Reference:...
CVE-2022-42453
CVE-2022-42453 relates to the HCL BigFix Platform and involves insufficient warnings when a Fixlet is imported by a user. The warning currently assumes the script owner is the logged-in user, and warnings are also insufficient when attempting to run the script. Several connected records (CVE list...
The World Cup: Prime Time for Sports Fans and Cybercriminals
From November 20 to December 18, fans from all over the world are tuned into the World Cup tournament in Qatar. While this is a major event for sports fans, it’s also prime time for bad actors. Large sporting events lead to increased levels of activity across sports and gambling sites, along with...
VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0032)
The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication remote code execution vulnerability. A malicious actor with administrator and network access may be able to remotely execute co...
CVE-2022-20602
Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A...
CVE-2022-20541
The CVE-2022-20541 entry concerns Android 13 where the function phNxpNciHal_ioctl in phNxpNciHal.cc may perform an out-of-bounds read due to a missing bounds check. The vulnerability is described as enabling local information disclosure with System execution privileges required, and reporting ind...
basesulimoveis.com.br Cross Site Scripting vulnerability OBB-3101583
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-47411
creationtimestamp| type| source ---|---|--- 2022-12-15 00:22:59+00:00| seen| https://t.me/cibsecurity/54565 2025-04-21 19:02:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12732...
SOUND4 IMPACT/FIRST/PULSE/Eco 2.x traceroute.php Conditional Command Injection
SOUND4 IMPACT/FIRST/PULSE/Eco =2.x traceroute.php Conditional Command Injection Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Puls...
CVE-2020-4497
CVE-2020-4497 affects IBM Spectrum Protect Plus 10.1.0–10.1.12. The root cause is unencrypted data in the communication flow between vSnap and its application agents, enabling information disclosure via man-in-the-middle techniques. IBM documents a fix in version 10.1.13 that adds transport encry...
