CVE-2025-55202

Opencast has a path traversal vulnerability in the UI configuration module present in version 18.0 and in prior 17.7 versions. The root cause is insufficient path validation where the file separator check is not applied, potentially allowing access to files in a different folder that shares a pre...

CVE-2025-55202 Opencast has a partial path traversal vulnerability in UI config

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...

GHSA-HQ8M-V68G-8CF8 Opencast has a partial path traversal vulnerability in UI config

The protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases. The path is checked without checking for the file separator. This could allow attackers access to files within another folder which starts with the...

The vulnerability of Mozilla Firefox browsers, related to the false representation of critical information to the user interface, allows attackers to compromise the integrity of the protected information.

The vulnerability of Mozilla Firefox browsers is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of Mozilla Firefox browsers, related to the false representation of critical information to the user interface, allows attackers to compromise the integrity of the protected information.

The vulnerability of Mozilla Firefox browsers is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

PT-2025-35228

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 17.7 Opencast version 18.0 Description Opencast is a platform for managing educational audio and video content. Insufficient protections against path traversal attacks in the UI config module could allow attackers...

The vulnerability of Firefox browser, related to errors in information representation by the user interface, allows attackers to compromise the integrity of protected information.

The vulnerability of the Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers relates to the false representation of critical information on the user interface, allowing attackers to compromise the integrity of protected information.

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers is related to the false representation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to influence the integrity of the protected information...

CVE-2024-49790 IBM Watson Studio on Cloud Pak for Data cross-site scripting

IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

CVE-2024-49790 IBM Watson Studio on Cloud Pak for Data cross-site scripting

IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi...

PT-2025-35089

Name of the Vulnerable Software and Affected Versions: IBM Watson Studio on Cloud Pak for Data versions 4.0 through 5.0 Description: IBM Watson Studio on Cloud Pak for Data is susceptible to a cross-site scripting issue. An authenticated user can inject arbitrary JavaScript code into the Web UI,...

Linux Distros Unpatched Vulnerability : CVE-2022-32919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that frames malicious...

Linux Distros Unpatched Vulnerability : CVE-2017-1000122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary proces...

Linux Distros Unpatched Vulnerability : CVE-2022-32891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious conten...

Linux Distros Unpatched Vulnerability : CVE-2022-3920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the U...

Linux Distros Unpatched Vulnerability : CVE-2025-3074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform UI spoofing via a crafted HTML page...

The vulnerability of the URL address line in Mozilla Firefox allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Mozilla Firefox browser’s address bar is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2023-5512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions startin...

Linux Distros Unpatched Vulnerability : CVE-2024-45598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the Poller Standard Error Log Path parameter in...

CVE-2025-0092

In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...