16963 matches found
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows that stems from a number of Microsoft technologies used in Windows 8 through Windows 11 that allow for a temporar...
CVE-2017-20190
Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should b...
AutomationDirect C-MORE EA9 HMI 安全漏洞
The AutomationDirect C-MORE EA9 HMI is a touchscreen from AutomationDirect, Inc. A security vulnerability exists in the AutomationDirect C-MORE EA9 HMI that stems from the use of credentials stored in plain text on the device...
CVE-2017-20190
Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text" attack. NOTE: third parties dispute whether the computational cost of interpreting Unicode data should b...
PT-2024-10599 · Microsoft · Windows 10 +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8 through 11 Description: The issue concerns a temporary client-side performance degradation that occurs when processing multiple Unicode combining characters, also known as a "Zalgo text" attack. This affects the...
CVE-2023-32359
A flaw was found in webkitgtk where a user’s password may be read aloud by a text-to-speech accessibility feature...
Fedora: Security Advisory (FEDORA-2024-aeb75f8b5b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: w3m-0.5.3-63.git20230121.fc40
The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...
Reflectionless Templates With Spring
A few Java libraries have shown up recently that use text templates, but compile to Java classes at build time. They can thus claim to some extent to be "reflection free". Together with potential benefits of runtime performance, they promise to be easy to use and integrate with GraalVM native ima...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1450)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update
An update for the ruby:3.1 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Tomcat: HTTP/2 header handling DoS
A vulnerability was found in the Tomcat package due to its handling of HTTP/2 requests. Specifically, when an HTTP/2 request surpasses the predetermined limits for headers configured within the server, the associated HTTP/2 stream isn't reset immediately. Instead, the reset action occurs only aft...
PT-2024-22771 · Danielmiessler · Fabric
Name of the Vulnerable Software and Affected Versions: danielmiessler fabric versions 1.3.0 and earlier Description: The issue is related to innerHTML mishandling, which can lead to XSS attacks, specifically in the installer/client/gui/static/js/index.js file, such as in the htmlToPlainText...
CVE-2021-38938
IBM Host Access Transformation Services HATS 9.6 through 9.6.1.4 and 9.7 through 9.7.0.3 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 210989...
CVE-2021-38938
IBM Host Access Transformation Services HATS 9.6 through 9.6.1.4 and 9.7 through 9.7.0.3 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 210989...
CVE-2021-38938
CVE-2021-38938 affects IBM Host Access Transformation Services (HATS) versions 9.6–9.6.1.4 and 9.7–9.7.0.3. The underlying issue is storing user credentials in plaintext, allowing a local user to read them. Reported by IBM/X-Force; CVSS base scores indicate confidentiality impactHigh with local a...
CVE-2021-38938 IBM Host Access Transformation Services information disclosure
IBM Host Access Transformation Services HATS 9.6 through 9.6.1.4 and 9.7 through 9.7.0.3 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 210989...
FriendlyWrt Security Vulnerability
FriendlyWrt is a customized system based on OpenWrt by FriendlyWrt. It is used for enterprise IoT secondary development, personal customization of NAS and so on. A security vulnerability exists in FriendlyWrt version 2022-11-16.51b3d35, which stems from the presence of a plain text key...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-1372)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-0700
The Simple Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tweet this text value in all versions up to, and including, 1.4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access a...