5584 matches found
CVE-2016-20014
Removed by vendor...
CVE-2016-20014
In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...
pam_tacplus 安全漏洞
pamtacplus is a PAM module for authenticating users via TACACS + Terminal Access Controller Access Control System by the individual developer Paweł Krawczyk in the UK. A security vulnerability exists in pamtacplus before 1.4.1, which stems from the fact that pamsmacctmgmt does not zero out the ar...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for managing software tools used to create reports for Cisco Security Manager’s deployed security solutions exists due to the lack of protective measures taken for the web page structure. Exploiting this vulnerability allows a malicious actor to perform...
The vulnerability of Cisco Webex Meetings’ software web interface stems from the lack of protective measures for the website structure. This allows attackers to disclose protected information, alter the appearance of the website, and perform phishing attacks as well as “drive-by” attacks.
The vulnerability of Cisco Webex Meetings’ software web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to disclose protected information, alter the appearance of the website, and perform phishing attacks ...
The vulnerability of the CKEditor WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.
The vulnerability of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform XSS attacks remotely...
The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor module allows a violator to circumvent the existing policy regarding access restrictions for HTML elements.
The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow an attacker to circumvent existing policies regarding access restrictions for HTML elements...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially created links...
The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, arises from its lack of security measures to protect the structure of web pages. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Nginx web server proxy management server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability in the embedded operating system OpenWrt arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability in the embedded operating system OpenWrt exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability in the embedded operating system OpenWrt arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability in the embedded operating system OpenWrt exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
PT-2022-2710 · Cisco · Cisco Iox +2
Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the Cisco IOx application hosting environment on multiple Cisco platforms. This could allow an attacker to injec...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...
CVE-2022-28258
Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...
CVE-2022-27241
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...
CVE-2022-27241
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...
Design/Logic Flaw
A vulnerability has been identified in Simcenter Femap All versions V2022.1.2. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to influence data integrity through malicious links...