The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace the user interface.

The vulnerability of the Adobe Connect instant messaging program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the user interface...

The vulnerability of the web server for visualizing BACnet/IP network controllers, SAUTER moduWeb Vision, allows a intruder to bypass the authentication process.

The vulnerability of the BACnet/IP network controller visualization web server from SAUTER moduWeb Vision is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by utilizing knowledge of password hashes without knowi...

The vulnerability of Google Chrome’s browser allows a hacker to replace URLs.

The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...

The vulnerability of Google Chrome allows a perpetrator to replace the source of a document.

The vulnerability of the Omnibox browser implementation by Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the source of the document...

Symfony PHP Framework Session Fixation

Advisory: Symfony PHP Framework: Session Fixation In "Remember Me" Login Functionality A session fixation vulnerability within the Symfony web application framework's "Remember Me" login functionality allows an attacker to impersonate the victim towards the web application if the session ID value...

The vulnerability of the Firefox browser, which allows a hacker to execute scripts across different websites

The vulnerability of the Firefox browser’s SDK extension is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks using specially crafted JavaScript code...

The vulnerability of the WildFly application server and the JBoss Enterprise Application Platform, which allows attackers to carry out clickjacking attacks

The vulnerability of the Management Console Java-server component of the WildFly application server and the JBoss Enterprise Application Platform-related platform is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out...

The vulnerability of the iOS operating system, which allows attackers to carry out “man-in-the-middle” attacks

The vulnerability of the X.509 certificate verification component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks remotely...

Vulnerability of Firefox and Firefox ESR browsers, which allows attackers to bypass the CORS protection mechanism

The vulnerability of Firefox and Firefox ESR browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the CORS protection mechanism by duplicating cookie sequence keys or extracting values from the response header of an incorrect HTTP...

The vulnerability of the Firefox browser, which allows a hacker to circumvent access restrictions to window elements

The vulnerability of the js/src/proxy/Proxy.cpp component of the Firefox browser is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to window elements by using a specially crafted web page...

The vulnerability of the Firefox browser, which allows a hacker to replace the window’s content

The vulnerability of Firefox browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the window’s content using a specially crafted web page...

The vulnerability of the iOS operating system allows a hacker to trigger a service failure in the application.

The vulnerability of the Application Store component of the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure for the application through a specially crafted ITMS URL...

The vulnerability of the iOS operating system allows a hacker to use the contacts in the address book to replace the sender’s address in the email.

The vulnerability of the Mail component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to use contacts in the address book to replace the sender’s address in emails sent from the device...

The vulnerability of the iOS operating system, which allows a hacker to bypass the signature verification mechanism for security checks

The vulnerability of the dyld component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the code signing verification mechanism by using a specially crafted application that embeds the signature within the...

The vulnerability of Google Chrome allows a hacker to replace the content of the browser window.

The vulnerability of Google Chrome is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the browser window’s content using a specially crafted application...

The vulnerability of Safari browser and iOS operating system allows attackers to carry out spoofing attacks.

The vulnerability of Safari browser and iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks by replacing the requested page due to lack of authentication checks...

The vulnerability in the Google Chrome browser allows a hacker to replace the SSL icon.

The vulnerability of the UnescapeURLWithAdjustmentsImpl implementation in the net/base/escape.cc component of the Google Chrome browser is related to security configuration errors. Exploiting this vulnerability could allow an attacker, operating remotely, to replace the SSL certificate by adding...

The vulnerability of Safari browser and iOS operating system allows attackers to circumvent access control rules.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass access controls by using mechanisms for controlling embedded video content remotely...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the decompose function in the Blink component of the Google Chrome browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted website...

The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass the user’s confirmation process when installing updates.

The vulnerability of the Firefox and Firefox ESR extension installation subsystem is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the user’s confirmation process during the installation of updates, by using specially crafted data...