Lucene search
+L

55 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:51 a.m.11 views

SUSE CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS8.6AI score0.01353EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/01/02 12:00 a.m.10 views

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome prior to version 104.0.5112.79 suffers from a Competitive Condition Issue vulnerability that stems from the presence of post-release reuse in Exosphere, which allows remote attackers to convince a user to engage ...

8.8CVSS8AI score0.00395EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/20 7:27 a.m.10 views

MAL-2022-5747 Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Exploit DB
Exploit DB
added 2018/06/06 12:00 a.m.87 views

Canon MF210/MF220 - Authenticaton Bypass

Canon MF210/MF220 - Authenticaton Bypass. CVE-2018-11711. Webapps exploit for Hardware platform Exploit Title: Incorrect Access Control in Canon MF210 & MF220 Series Date: 4.6.2018 Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Software Link: Website Version: MF210 & MF20 Series...

10CVSS9.7AI score0.05195EPSS
SaveExploits3
OSV
OSV
added 2017/10/27 5:29 a.m.23 views

UBUNTU-CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS6.7AI score0.01353EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:00 a.m.13 views

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace the user interface.

The vulnerability of the Adobe Connect instant messaging program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the user interface...

5CVSS6.3AI score0.01773EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2015/09/11 4:59 p.m.22 views

CVE-2015-5631

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

6.8CVSS7.2AI score0.00649EPSS
SaveExploits0References3
Prion
Prion
added 2015/09/11 4:59 p.m.19 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

6.8CVSS7.7AI score0.00649EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2015/09/11 4:00 p.m.28 views

CVE-2015-5631

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

7.2AI score0.00649EPSS
SaveExploits0References3
CVE
CVE
added 2015/09/11 4:00 p.m.42 views

CVE-2015-5631

The CVE-2015-5631 issue affects Canon PIXMA MG7500 Series printers and specifically the Remote UI. The vulnerability is a Cross‑Site Request Forgery (CSRF) that lets remote attackers hijack administrator sessions when a user views a malicious page while logged into the Remote UI, enabling uninten...

6.8CVSS7.4AI score0.00649EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/09/11 12:00 a.m.30 views

JVN#07427376: PIXMA MG7500 Series vulnerable to cross-site request forgery

PIXMA MG7500 Series provided by Canon Inc. contain a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged into the Remote UI, unintended operations may be performed. Solution Apply a Workaround The following workaround can mitigate the affects of this...

6.8CVSS6.5AI score0.00649EPSS
SaveExploits0
NVD
NVD
added 2006/09/11 5:04 p.m.24 views

CVE-2006-4680

The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information...

4CVSS6.4AI score0.01052EPSS
SaveExploits0References7
CVE
CVE
added 2006/09/11 5:00 p.m.60 views

CVE-2006-4680

The CVE-2006-4680 entry describes a vulnerability in Canon imageRUNNER where the Remote UI exports the address book including usernames and passwords, leading to information disclosure. Affected component: Remote UI/address book export. Root cause: exporting process exposes credential data, enabl...

4CVSS6.8AI score0.01052EPSS
SaveExploits0References7Affected Software7
Cvelist
Cvelist
added 2006/09/11 5:00 p.m.34 views

CVE-2006-4680

The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information...

6.4AI score0.01052EPSS
SaveExploits0References7
securityvulns
securityvulns
added 2006/09/07 12:00 a.m.43 views

Canon ImageRunner reveals SMB, IPX, and FTP username/passwords

The Canon ImageRunner multi-function device’s Remote UI web interface software will reveal username and password pairs contained in address book entries when the address book is exported. These address book entries are used for scanning to SMB, FTP, or IPX shares. In addition, passwords for...

0.4AI score
SaveExploits0
Rows per page
Query Builder