7408 matches found
Gateway Logon Page showing Blank (Logon page white screen)
The logon page of newly added gateway virtual server shows blank, while all the previous configured gateway virtual servers working fine...
Open redirect vulnerability on CMSSecurity relogin screen
An attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Upgrade to silverstripe/framework 4.12.5 or above to remedy the vulnerability. Reporter: Matthew Dekker...
CVE-2023-22729 Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link...
CVE-2023-22729 Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link...
PT-2023-18670 · Silverstripe · Silverstripe/Framework
Name of the Vulnerable Software and Affected Versions: Silverstripe Framework versions prior to 4.12.15 Description: An attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Recommendations: For version...
socket.c in GNU Screen through 4.9.0 when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD) allows local users to send a privileged SIGHUP signal to any PID causing a denial of service or disruption of the target process.
...
CVE-2023-21094
In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.8ESR) have affected APM Synthetic Playback Agent
Summary APM Synthetic Playback Agent is vulnerable to Firefox ESR CVE-2023-25730, CVE-2023-25729, CVE-2023-25742, CVE-2023-25734, CVE-2023-25738, CVE-2023-25728 . Firefox ESR is used by APM Synthetic Playback Agent for running the selenium scripts. The fix includes support for Firefox 102.8 ESR...
CVE-2023-21094
CVE-2023-21094 describes a local elevation-of-privilege in Android: in the sanitize path of LayerState.cpp a missing permission check could allow an attacker to take over the display content on Android 11, 12, 12L, and 13. The issue enables local code execution without additional privileges or us...
CVE-2018-17454
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen...
GitLab 跨站脚本漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from the presence of stor...
The vulnerability of the Windows operating system’s lock screen allows a hacker to bypass security restrictions.
The vulnerability of the Windows operating system’s lock screen is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...
The vulnerability of the Windows operating system’s lock screen allows a hacker to bypass security restrictions.
The vulnerability of the Windows operating system’s lock screen is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...
Debian DSA-5385-1 : firefox-esr - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5385 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing. For th...
Malicious code in smarttv-screen (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c1206c11f41ef711a2a427150a0c5529e775123fa6d441e320f324388924604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-780 Malicious code in smarttv-screen (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c1206c11f41ef711a2a427150a0c5529e775123fa6d441e320f324388924604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the Screen Creator Advance 2 software lies in the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Screen Creator Advance 2 software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
Mozilla Firefox Security Advisory (MFSA2023-13) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...