1416 matches found
CVE-2022-33723
A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack...
CVE-2022-33723
A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack...
PT-2022-21844 · Unknown · Secdevicepickerdialog
Name of the Vulnerable Software and Affected Versions: SecDevicePickerDialog versions prior to SMR Aug-2022 Release 1 Description: A vulnerable code in the onCreate method of SecDevicePickerDialog allows attackers to trick the user into selecting an unwanted Bluetooth device via tapjacking or...
GSD-2022-1004707 wifi: mac80211: fix queue selection for mesh/OCB interfaces
wifi: mac80211: fix queue selection for mesh/OCB interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...
GSD-2022-1004583 wifi: mac80211: fix queue selection for mesh/OCB interfaces
wifi: mac80211: fix queue selection for mesh/OCB interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...
GSD-2022-1004414 wifi: mac80211: fix queue selection for mesh/OCB interfaces
wifi: mac80211: fix queue selection for mesh/OCB interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...
GSD-2022-1004196 wifi: mac80211: fix queue selection for mesh/OCB interfaces
wifi: mac80211: fix queue selection for mesh/OCB interfaces This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...
CVE-2022-2001
The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxssadminpage function found in the /dx-share-selection.php file. This makes it possible for unauthenticated attackers to...
Cross site request forgery (csrf)
The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxssadminpage function found in the /dx-share-selection.php file. This makes it possible for unauthenticated attackers to...
CVE-2022-2001
The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxssadminpage function found in the /dx-share-selection.php file. This makes it possible for unauthenticated attackers to...
CVE-2022-2001 DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxssadminpage function found in the /dx-share-selection.php file. This makes it possible for unauthenticated attackers to...
CVE-2022-2001
The CVE-2022-2001 entry concerns the WordPress plugin DX Share Selection. A CSRF/unauthenticated-elevation issue exists in versions up to 1.4 due to missing nonce protection in the dxss_admin_page() function of dx-share-selection.php. This allows an attacker to induce an administrator to perform ...
WordPress plugin DX Share Selection 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2022-14256 · WordPress · Dx Share Selection
Name of the Vulnerable Software and Affected Versions: DX Share Selection plugin for WordPress versions up to, and including 1.4 Description: The issue is due to missing nonce protection on the dxss admin page function found in the /dx-share-selection.php file, making it possible for...
CVE-2022-20230
In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
The vulnerability of clients under comprehensive network endpoint protection from Check Point Endpoint Security, which arises from the use of external control for selecting classes, allows attackers to disable the protection of certain network endpoints.
The vulnerability of Check Point Endpoint Security’s comprehensive network endpoint protection lies in the use of externally controlled input data for determining class assignments. Exploiting this vulnerability can allow an attacker to disable the protection for certain network endpoints...
WordPress DX Share Selection plugin <= 1.4 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by Sho Sakata Cryptography Laboratory at Tokyo Denki University in WordPress DX Share Selection plugin versions = 1.4. Solution Update the WordPress DX Share Selection plugin to the latest available versi...
Malicious code in utxo-selection (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 537d19f0c3c8d33cd234a96a8ad34594f177451ab75f6655af683ace4dd6a9ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6872 Malicious code in utxo-selection (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 537d19f0c3c8d33cd234a96a8ad34594f177451ab75f6655af683ace4dd6a9ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
