6540 matches found
Adobe Prelude < 22.1.1 Multiple Vulnerabilities (APSB21-114)
The version of Adobe Prelude installed on the remote Windows host is prior to 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-114 advisory. - Adobe Prelude version 22.1.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure...
The vulnerability of the J-Web interface in Junos OS operating systems allows attackers to circumvent security restrictions.
The vulnerability of the J-Web interface in Junos OS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...
Piwigo Cross-Site Scripting Vulnerability (CNVD-2021-101688)
Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...
Gumtree exposed users’ personal and GPS location via source code
By Waqas Gumtree.com or Gumtree is a London, England-based online classified advertisement website with millions of registered users. This is a post from HackRead.com Read the original post: Gumtree exposed users personal and GPS location via source code...
openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1575-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1575-1 advisory. - Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability...
The vulnerability of the SIMalliance Toolbox browser on Samsung devices allows a perpetrator to disclose protected information, extract location and IMEI information, or execute certain commands.
The vulnerability of the SIMalliance Toolbox browser on Samsung devices is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to disclose protected information, extract location and IMEI details, or execute certain commands using the SIM Toolkit S...
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client involves a cycle that can be executed with an unavailable exit condition, allowing an attacker to perform a denial-of-service attack.
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure through an infinite loop error when using the Location...
wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users
A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
Piwigo 跨站脚本漏洞
Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...
Samsung RRC MeasurementReport Exception Condition Handling Vulnerability
Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...
Microsoft Internet Explorer / ActiveX Control - Security Bypass
Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-ACTIVEX-CONTROL-SECURITY-BYPASS.txt twitter.com/hyp3rlinx ISR:...
Mozilla Firefox ESR Security Advisory (MFSA2021-53) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
SUSE SLES11: MozillaFirefox / MozillaFirefox-translations-common / etc (SUSE-SU-2021:14859-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14859-1 advisory. Update to Extended Support Release 91.4.0 bsc1193485: - CVE-2021-43536: URL leakage when navigating while executing asynchronous function -...
Denial Of Service (DoS)
thunderbird and firefox are vulnerable to denial of service. The vulnerability exists due to a lack of sanitization in the location API when using in a loop...
Mozilla Firefox infinite loop vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to an infinite loop vulnerability that stems from the use of the Location API in a loop, which can be exploited by attackers to cause applications to hang and crash...