6 matches found
CVE-2025-43798: Missing Critical Step in Authentication
Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password TOTP to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user...
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Jun 2022)
This host is missing an important security update according to Microsoft Edge Chromium-Based update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
GHSA-3P9J-442X-HJP7 Business Logic Errors in microweber
microweber prior to 1.2.11 allows multiple uses of a single-use coupon...
CVE-2016-5130
content/renderer/historycontroller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site...
Internet Bug Bounty: Multiple use after free bugs in json encoding
https://bugs.python.org/issue24094 https://bugs.python.org/issue24095 https://bugs.python.org/issue24105...
CVE-2015-0823
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the...