CVE-2024-35146 IBM Maximo Application Suite cross-site scripting

IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2024-35146 IBM Maximo Application Suite cross-site scripting

IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Injection - Cross Site Scripting Rule

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Injection - Cross Site Scripting Rule . This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-35146 DESCRIPTION: IBM Maximo Application Suite - Monitor Component is...

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...

CVE-2024-34677

CVE-2024-34677 relates to a vulnerability in Samsung Mobile’s System UI prior to the SMR Nov-2024 Release 1. The issue enables local attackers to exploit a flaw in System UI to disclose sensitive information and to cause malicious apps to appear legitimate. The publicly documented affected compon...

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from System UI contains a sensitive information...

MAL-2024-10349 Malicious code in @douinfe/semi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca4a86d374c7183a13c8652c4a75b56c62f904cc492c9b61506ef524c9911c The OpenSSF Package Analysis project identified '@douinfe/semi-ui' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in @douinfe/semi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca4a86d374c7183a13c8652c4a75b56c62f904cc492c9b61506ef524c9911c The OpenSSF Package Analysis project identified '@douinfe/semi-ui' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

CVE-2024-50346

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

Huawei HarmonyOS和EMUI 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A data validation...

PT-2024-26098 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Nov-2024 Release 1 Description: The issue allows local attackers to expose sensitive information and make malicious apps appear as legitimate. This is achieved by exploiting a flaw in the System UI...

CVE-2024-50346 WebFeed HTML injection vulnerabilities

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

CVE-2024-50346 WebFeed HTML injection vulnerabilities

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

CVE-2024-50346 WebFeed HTML injection vulnerabilities

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

CVE-2024-50346

WebFeed is a lightweight RSS/Atom reader extension for Firefox/Chrome. The identified issue comprises multiple HTML injection vulnerabilities in WebFeed (prior to version 0.9.2) that can lead to CSRF and UI spoofing. A remote attacker can supply malicious RSS feeds and lure a user to visit them v...

RHEL 7 : openstack-manila-ui (RHSA-2016:2116)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2016:2116 advisory. OpenStack's File Share Service manila provides the means to easily provision shared file systems that can be consumed by multiple instances. These...

PT-2024-34156 · Webfeed · Webfeed

Name of the Vulnerable Software and Affected Versions: WebFeed versions prior to 0.9.2 Description: The issue concerns multiple HTML injection vulnerabilities that can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds, attracting the victim user to visit them...

IBM CICS TX Standard Web UI Cross-Site Request Forgery Vulnerability

IBM CICS TX Standard is a comprehensive single-transaction runtime package from International Business Machines IBM that provides a cloud-native deployment model for standalone applications. A cross-site request forgery vulnerability exists in the IBM CICS TX Standard Web UI, which can be exploit...