12882 matches found
Google Chrome Downloads Component Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Downloads component, which can be exploited by attackers to bypass security restrictions...
Google Chrome Picture In Picture component security bypass vulnerability (CNVD-2023-46118)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Picture In Picture component, which can be exploited by attackers to bypass security restrictions...
Joomla! 1.5.x < 1.5.16 Multiples Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass that may allow attackers to perform otherwise restricted actions - A session fixation an attacker may leverage this issue to hijack an arbitrary session an...
Google Chrome Installer Component Security Bypass Vulnerability
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Installer component, which can be exploited by attackers to bypass security restrictions...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Downloads component, which can be exploited by attackers to bypass security restrictions...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Picture In Picture component, which can be exploited by attackers to bypass security restrictions...
Vulnerabilities fixed in Zimbra Collaboration Suite
Zimbra has fixed vulnerabilities in the Zimbra Collaboration Suite ZCS. A malicious party can exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Bypassing authentication Bypassing security measure...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 114.0.5735.90, which stems from a mal-implementation issue in the Extensions API module. An attacker could exploit this vulnerability to bypass security...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Picture In Picture component, which can be exploited by attackers to bypass security restrictions...
Apache InLong Security Bypass Vulnerability (CNVD-2023-42959)
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.2.0 through 1.6.0. An attacker can exploit the vulnerability to bind any cluster, even if he is not the cluster owner...
Apache InLong Security Bypass Vulnerability (CNVD-2023-42960)
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0. An attacker can exploit the vulnerability to change the immutable name and type of an InLong cluster...
Apache InLong Security Bypass Vulnerability (CNVD-2023-42958)
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0. The vulnerability is caused due to a resource being exposed to the wrong sphere flaw. An attacker can...
Apache InLong Security Bypass Vulnerability (CNVD-2023-42962)
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.2.0 through 1.6.0, which can be exploited by an attacker to cancel an application...
Apache InLong Security Bypass Vulnerability (CNVD-2023-42961)
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0, which can be exploited by an attacker to delete, edit, stop, and start another person's source...
Apache InLong Security Bypass Vulnerability
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.4.0 through 1.6.0, which stems from insufficient session expiration, and can be exploited by an attacker to reuse old...
AIX is vulnerable to security restrictions bypass due to curl
IBM SECURITY ADVISORY First Issued: Fri May 26 09:26:13 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory.asc Security Bulletin: AIX is vulnerable to security restrictions bypass due to curl CVE-2022-32221...
CVE-2023-33949
In Liferay Portal 7.3.0 and earlier, and Liferay DXP 7.2 and earlier the default configuration does not require users to verify their email address, which allows remote attackers to create accounts using fake email addresses or email addresses which they don't control. The portal property...
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the lack of authentication procedures. This allows attackers to circumvent existing security restrictions and download the configuration file.
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and download the configuration file remotely...
The vulnerability of the control panel of the microprogrammed software for DVR devices TBK DVR4104 and TBK DVR4216 allows intruders to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the control panel of the microprogrammed software for DVR devices TBK DVR4104 and TBK DVR4216 lies in the lack of measures to neutralize special elements during the processing of the Cookie header: uid=admin. Exploiting this vulnerability allows a remote attacker to bypass...