21075 matches found
CVE-2024-7968
Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
GO-2022-0937 Elvish vulnerable to remote code execution via the web UI backend in github.com/elves/elvish
Elvish vulnerable to remote code execution via the web UI backend in github.com/elves/elvish...
GO-2022-0308 Gitea displaying raw OpenID error in UI in github.com/go-gitea/gitea
Gitea displaying raw OpenID error in UI in github.com/go-gitea/gitea...
GO-2023-2020 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager...
Apache Helix Front (UI) component contained a hard-coded secret
The Apache Helix Front UI component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects Apache Helix Front UI: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are...
GHSA-6247-7862-Q2PQ Apache Helix Front (UI) component contained a hard-coded secret
The Apache Helix Front UI component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects Apache Helix Front UI: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are...
PT-2024-5906 · Google +5 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Views, allowing a remote attacker to perform UI spoofing via a crafted HTML...
PT-2024-5809 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in WebApp Installs, allowing an attacker to perform UI spoofing via a crafted HT...
Google Chrome 安全漏洞
Google Chrome is a free web browser developed by Google. It is the world's largest browser in terms of market share due to its speed, security, simplicity, multi-platform support and built-in privacy protection. Google Chrome suffers from a privilege issue vulnerability that can be exploited by...
PT-2024-5810 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Custom Tabs, allowing a remote attacker to perform UI spoofing via a crafted...
CVE-2024-22281
The CVE-2024-22281 entry concerns Apache Helix Front (UI). The vulnerability is caused by a hard-coded secret in the express-session usage, enabling session spoofing via forged cookies across all versions of the Front UI. Public details state that the project is retired and no fix will be release...
CVE-2024-22281 Apache Helix Front (UI): Helix front hard-coded secret in the express-session
UNSUPPORTED WHEN ASSIGNED The Apache Helix Front UI component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects Apache Helix Front UI: all versions. As this project is retired, we do not plan to release a version that...
GO-2023-1471 Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server
Reflected XSS in Gotify's /docs via import of outdated Swagger UI in github.com/gotify/server...
GHSA-VWF8-Q6FW-4WCM vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium-fips, hubble-ui-backend-fips, cilium, cilium-cli, hubble-fips...
GHSA-VWF8-Q6FW-4WCM vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium-cli...
CVE-2024-42486 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium-cli...
GHSA-QCM3-7879-XCWW vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium-fips, hubble-ui-backend-fips, cilium, cilium-cli, hubble-fips...
GHSA-QCM3-7879-XCWW vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium-cli...