6446 matches found
wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users
A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
Samsung RRC MeasurementReport Exception Condition Handling Vulnerability
Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...
Piwigo 跨站脚本漏洞
Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...
Microsoft Internet Explorer / ActiveX Control - Security Bypass
Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-ACTIVEX-CONTROL-SECURITY-BYPASS.txt twitter.com/hyp3rlinx ISR:...
Mozilla Firefox ESR Security Advisory (MFSA2021-53) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
SUSE SLES11: MozillaFirefox / MozillaFirefox-translations-common / etc (SUSE-SU-2021:14859-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14859-1 advisory. Update to Extended Support Release 91.4.0 bsc1193485: - CVE-2021-43536: URL leakage when navigating while executing asynchronous function -...
Denial Of Service (DoS)
thunderbird and firefox are vulnerable to denial of service. The vulnerability exists due to a lack of sanitization in the location API when using in a loop...
Mozilla Firefox infinite loop vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to an infinite loop vulnerability that stems from the use of the Location API in a loop, which can be exploited by attackers to cause applications to hang and crash...
Mozilla: Denial of Service when using the Location API in a loop
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
Mozilla: Denial of Service when using the Location API in a loop
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
Mozilla: Denial of Service when using the Location API in a loop
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
Mozilla: Denial of Service when using the Location API in a loop
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
Mozilla: Denial of Service when using the Location API in a loop
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
VulnCheck KEV: CVE-2021-24209
The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated admin+ RCE in the settings page due to input validation failure and weak $cachepath check in the WP Super Cache Settings - Cache Location option. Direct access to the wp-cache-config.php file is not...