55 matches found
SUSE CVE-2017-5079
Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...
Google Chrome 竞争条件问题漏洞
Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome prior to version 104.0.5112.79 suffers from a Competitive Condition Issue vulnerability that stems from the presence of post-release reuse in Exosphere, which allows remote attackers to convince a user to engage ...
MAL-2022-5747 Malicious code in remote-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Canon MF210/MF220 - Authenticaton Bypass
Canon MF210/MF220 - Authenticaton Bypass. CVE-2018-11711. Webapps exploit for Hardware platform Exploit Title: Incorrect Access Control in Canon MF210 & MF220 Series Date: 4.6.2018 Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Software Link: Website Version: MF210 & MF20 Series...
UBUNTU-CVE-2017-5079
Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...
The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace the user interface.
The vulnerability of the Adobe Connect instant messaging program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the user interface...
CVE-2015-5631
Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...
CVE-2015-5631
Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...
CVE-2015-5631
The CVE-2015-5631 issue affects Canon PIXMA MG7500 Series printers and specifically the Remote UI. The vulnerability is a Cross‑Site Request Forgery (CSRF) that lets remote attackers hijack administrator sessions when a user views a malicious page while logged into the Remote UI, enabling uninten...
JVN#07427376: PIXMA MG7500 Series vulnerable to cross-site request forgery
PIXMA MG7500 Series provided by Canon Inc. contain a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged into the Remote UI, unintended operations may be performed. Solution Apply a Workaround The following workaround can mitigate the affects of this...
CVE-2006-4680
The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information...
CVE-2006-4680
The CVE-2006-4680 entry describes a vulnerability in Canon imageRUNNER where the Remote UI exports the address book including usernames and passwords, leading to information disclosure. Affected component: Remote UI/address book export. Root cause: exporting process exposes credential data, enabl...
CVE-2006-4680
The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information...
Canon ImageRunner reveals SMB, IPX, and FTP username/passwords
The Canon ImageRunner multi-function device’s Remote UI web interface software will reveal username and password pairs contained in address book entries when the address book is exported. These address book entries are used for scanning to SMB, FTP, or IPX shares. In addition, passwords for...