Cross-site Scripting (XSS)

Overview angular is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this package...

Cross-site Scripting (XSS)

Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. Details Cross-site scripting ...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicio...

Low-income consumers preyed on by fake ISP during pandemic, FCC says

The FCC Federal Communications Commission has proposed a fine of $220,210 against Kyle Traxler of Ohio for allegedly establishing the bogus internet provider, Cleo Communications, to scam low-income consumers. The victims believed they were receiving government-approved discounts on internet...

Verizon 5G Home LVSKIHP 操作系统命令注入漏洞

The Verizon 5G Home LVSKIHP is an all-in-one integrated modem and router from Verizon USA. It provides access to Verizon Wireless 5G wireless home Internet services. A security vulnerability exists in Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162, which stems from not properly handlin...

Authorization

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after they expire. Users who use FlyteAdmin...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has an input validation error vulnerability that can be exploited by an attacker to cause a deni...

CVE-2022-30209

Windows IIS Server Elevation of Privilege Vulnerability...

CVE-2022-30209

Windows IIS Server Elevation of Privilege Vulnerability...

CVE-2022-22025

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability...

CVE-2022-22025

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability...

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

CVE-2022-22025

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability...

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

Denial of service

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability...

CVE-2022-22025 Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

...

PT-2022-3744 · Microsoft · Windows Internet Information Services +1

Name of the Vulnerable Software and Affected Versions: Windows Internet Information Services affected versions not specified Description: The issue is related to the Cachuri Module in Microsoft Internet Information Services IIS and involves incorrect clearance or release of resources. This can be...

Microsoft Windows Internet Information Services 权限许可和访问控制问题漏洞

Microsoft Windows Internet Information Services IIS is a Web server from Microsoft Corporation for the Windows Server platform. A vulnerability exists in Microsoft Windows Internet Information Services with privilege permission and access control issues. The following products and editions are...

PT-2022-3795 · Microsoft · Internet Information Services +1

Name of the Vulnerable Software and Affected Versions: Internet Information Services IIS affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the Microsoft Internet Information Services IIS package, which can lead to a denial-of-service...