Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 132, which stems from the clipboard paste button persisting in tabs that allow spoofing attacks...

IBM MQ 9.1 < 9.1.0.24 LTS / 9.2 < 9.2.0.28 LTS / 9.3 < 9.3.0.25 LTS / 9.3 < 9.4.1 CD / 9.4 < 9.4.0.6 LTS (7174363)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 7174363 advisory. - IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could...

Security Bulletin: Maximo Application Suite - IBM WebSphere Application Server Liberty is vulnerable to CVE-2023-50314 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to CVE-2023-50314. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

The vulnerability of the system administration tool Sudo on Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the system administration tool Sudo in Windows operating systems is related to improper restrictions on communication channels for potential targets. Exploiting this vulnerability allows attackers to perform spoofing attacks...

Microsoft Office Spoofing Vulnerability (CNVD-2024-42941)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attack...

Microsoft Office 信息泄露漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attack...

Microsoft Windows Secure Channel 信任管理问题漏洞

Microsoft Windows Secure Channel is a Microsoft Security Support Provider SSP that contains a set of security protocols that provide authentication and secure, private communications through encryption. A vulnerability exists in Microsoft Windows Secure Channel for trust management issues. An...

PT-2024-6835 · Microsoft · Defender For Endpoint For Linux

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Endpoint for Linux affected versions not specified Description: The issue is related to errors in handling relative directory paths, which can be exploited to conduct spoofing attacks. Recommendations: At the moment,...

Microsoft Defender 安全漏洞

Microsoft Defender is a threat protection software from Microsoft USA. A security vulnerability exists in Microsoft Defender. An attacker exploits the vulnerability to perform spoofing attacks...

The vulnerability of the Google Chrome browser’s Navigation function, which allows attackers to perform spoofing attacks

The vulnerability of the Google Chrome browser’s Navigation function is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created HTML page...

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to GNOME GLib, libcurl and kerberos 5

Summary GNOME GLib, libcurl and kerberos 5 used by IBM MQ Operator and Queue Manager container images are vulnerable to spoofing attacks, denial of service due to improper memory allocation, and privilege escalation which may lead to bypassing security restrictions. This bulletin identifies the...

CVE-2024-40866

A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website. Mitigation Mitigation for this issue is...

ROS-20240924-01

The vulnerability in Firefox and Firefox ESR browsers and Thunderbird email client is related to flaws in the in access control. Exploitation of the vulnerability could allow an attacker acting remotely, redirect a user to an arbitrary URL using a specially crafted extension The vulnerability in...

ROS-20240923-02

Vulnerability of ANGLE library in Mozilla Firefox, Firefox ESR and Thunderbird email client browsers is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

Apple Safari Security Update (HT121241)

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

Security Bulletin: Multiple Vulnerabilities in Rational Asset Manager

Summary Multiple vulnerabilities were addressed in Rational Asset Manager version 7.5.4.15 Vulnerability Details CVEID:CVE-2015-5262 DESCRIPTION: Apache Commons is vulnerable to a denial of service, caused by the failure to apply a configured connection during the initial handshake of an HTTPS...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Debian dsa-5772 : fonts-opensymbol - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5772 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5772-1 [email protected] https://www.debian.org/security/ Moritz...