CVE-2022-23657

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

GHSA-W77P-8CFG-2X43 Improper Access Control in SLF4J

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta4 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J version 1.7.26 and later and in the 2.0.x series. Note tha...

Apache Struts vulnerable to Improper Input Validation

Apache Software Foundation ASF Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from improper handling of logical operations, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the improper handling of logical operations. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Task Manager component in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the Task Manager component in Google Chrome relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability in the implementation of the Autofill function in Google Chrome and Microsoft Edge browsers allows attackers to circumvent existing security restrictions.

The vulnerability of Autofill implementations in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

The vulnerability of Mozilla Firefox’s Content Security Policy component allows a perpetrator to circumvent existing security restrictions.

The vulnerability of Mozilla Firefox’s Content Security Policy component is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to bypass existing security restrictions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the ANGLE library in the Google Chrome browser is related to buffer overflow in the queue mechanism. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...

DEBIAN-CVE-2022-0309

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to insufficient validation of input data, allows a hacker to bypass security measures.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass security measures remotely...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent security restrictions.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

The vulnerability of the configuration of Wi-Fi router software from NETGEAR, namely R6400v2, R6700v3, and XR1000, stems from the lack of protection for service data. This allows attackers to circumvent the security measures.

The vulnerability of the configuration of Wi-Fi router software from NETGEAR, including models R6400v2, R6700v3, and XR1000, lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from deficiencies in authentication mechanisms. This allows attackers to circumvent security restrictions.

The vulnerability of Wi-Fi router microprogramming software from NETGEAR, including models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security...

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR40, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from deficiencies in authentication mechanisms. This allows attackers to circumvent security restrictions.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as CBR40, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions from a remo...

The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2100, AC2400, AC2600, D7000, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication mechanism flaws. These flaws allow attackers to circumvent security restrictions.

The vulnerabilities of NETGEAR Wi-Fi router software models AC2100, AC2400, AC2600, D7000, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to authentication mechanism flaws. Exploiting these vulnerabilities can allow attackers to bypas...

haproxy: an HTTP method name may contain a space followed by the name of a protected resource

haproxy has an input validation flaw that could allow a remote attacker to bypass implemented security restrictions. An HTTP method name may contain a space followed by the name of a protected resource. Given this, It is possible that an server would interpret this as a request for that protected...

The vulnerability of the iFrame Sandbox component in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the iFrame Sandbox component in Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of Google Chrome’s web storage mechanism, which allows a hacker to circumvent existing security restrictions

The vulnerability of Google Chrome browser-based web storage is caused by synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...