1150 matches found
CVE-2022-38712
"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."...
PT-2022-24543 · Ibm · Ibm Websphere Application Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 7.0 through 9.0 Description: The issue allows a man-in-the-middle attacker to conduct SOAPAction spoofing, potentially executing unwanted or unauthorized operations. Recommendations: For versions 7.0...
CVE-2022-38712
"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."...
Rdiffweb Authorization Issues Vulnerability
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An authorization issue vulnerability exists in Rdiffweb versions prior to 2.4.7, which can be exploited by an attacker to steal cookies...
NOKIA 1350 OMS SQL注入漏洞
NOKIA 1350 OMS is an optical management system from Nokia Finland. A SQL injection vulnerability exists in NOKIA 1350 OMS version R14.2, which can be exploited by an attacker to inject arbitrary SQL statements, modify query syntax and perform unauthorized operations on a remote database...
WordPress plugin Social Share Buttons 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress Social Share Buttons 2.2.3 and prior versions, which stems from an improper access contr...
CVE-2022-28862
In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized and unexpected operations against the remo...
ZoneMinder Cross-Site Request Forgery Vulnerability (CNVD-2022-57808)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site request forgery vulnerability exists in ZoneMinder 1.32.3 and prior versions, which can be exploited by remote attackers to perform unauthorized operations...
CVE-2021-40044
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...
CVE-2021-40044
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...
CVE-2021-40044
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...
Privilege escalation
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...
CVE-2021-40044
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...
Huawei EMUI 安全漏洞
Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. Huawei EMUI suffers from an authorization issue vulnerability, which stems from a privilege authentication vulnerability in the system's Bluetooth module. An attacker can exploit this vulnerability to...
Mozilla Firefox 安全特征问题漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security signature issue vulnerability exists in Mozilla Firefox, which arises from a product framework root content security policy directive that does not restrict framework extension pages. A remote attacker could use...
IBM Cognos Analytics Cross-Site Request Forgery Vulnerability (CNVD-2021-95246)
IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A security vulnerability exists...
Unauthorized Access Vulnerability in ioLogik E1242 Series of Mosaic Technology (Shanghai) Co.
The ioLogik E1242 series are daisy-chained Ethernet switches that support the most commonly used I/O data acquisition protocols to match a wide range of applications. Mosa Technologies Shanghai Co., Ltd. ioLogik E1242 series suffers from an unauthorized access vulnerability, which can be exploite...
Signature Verification Bypass
ecdsa-node is vulnerable to signature verification bypass. The vulnerability exists because the ranges of signature r and s in verify function of ecdsa.js are not properly validated. A malicious attacker is able to perform unauthorized operations by gaining access, forging signatures on arbitrary...
GHSA-9WX7-JRVC-28MM Signature verification vulnerability in Stark Bank ecdsa libraries
An attacker can forge signatures on arbitrary messages that will verify for any public key. This may allow attackers to authenticate as any user within the Stark Bank platform, and bypass signature verification needed to perform operations on the platform, such as send payments and transfer funds...
IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2021-84239)
IBM InfoSphere Information Server is a data integration platform from IBM Corporation. A security vulnerability exists in IBM InfoSphere Information Server, which stems from the vulnerability of IBM InfoSphere Information Server to cross-site request forgery, which could be exploited by an attack...