CVE-2024-45717

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

CVE-2024-45717

CVE-2024-45717 affects SolarWinds Platform with an XSS vulnerability in the UI (search and node information). The issue requires authentication and user interaction. Connected sources indicate this is a versioned flaw for SolarWinds Platform (NVD/NVD-like entries) and, per Nessus, applies to 2024...

CVE-2024-45717 SolarWinds Platform Cross- Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

CVE-2024-45717 SolarWinds Platform Cross- Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

SolarWinds Platform 跨站脚本漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Platform that stems from susceptibility to a cross-site scripting attack that affects the search and node...

Docusign API 安全漏洞

The Docusign API is a secure and scalable API from Docusign. A security vulnerability exists in the Docusign API that stems from misrepresentation of critical information in the user interface leading to content spoofing...

Docusign API 安全漏洞

The Docusign API is a secure and extensible API from Docusign, Inc. A security vulnerability exists in the Docusign API that stems from misrepresentation of critical information in the user interface leading to content spoofing...

SolarWinds Platform 2024.0 < 2024.4.1 XSS

The version of SolarWinds Platform installed on the remote host is prior to 2024.4.1. It is, therefore, affected by a vulnerability as referenced in the solarwindsplatform202441 advisory. - The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information...

DocuSeal 安全漏洞

DocuSeal is an open source platform from DocuSeal, Inc. that provides secure and efficient digital document signing and processing. A security vulnerability exists in DocuSeal versions prior to 1.8.1 that stems from a user interface critical information misrepresentation vulnerability that allows...

PT-2024-35146 · Docusign · Docusign

Name of the Vulnerable Software and Affected Versions: DocuSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, which allows Content Spoofing. This means that the displayed version of a document does not...

PT-2024-35140 · Docusign · Docusign

Name of the Vulnerable Software and Affected Versions: DocuSign versions through 2024-12-04 Description: The issue concerns a User Interface UI Misrepresentation of Critical Information vulnerability that allows Content Spoofing. Specifically, the SaaS AI assistant ignores hidden content that is...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to carry out spear-phishing attacks.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to carry out phishing attacks using a specially created HTML page...

Vulnerabilities fixed in Zabbix

Zabbix has fixed vulnerabilities in the Zabbix server and frontend. The vulnerabilities include a stack buffer overflow in the zbxsnmpcachehandleengineid function, which can lead to execution of arbitrary code or a denial of service. In addition, there is an SQL injection vulnerability that allow...

@10play/tentap-editor (>=0.5.27 <=0.7.5-alpha.0), @adminjs/design-system (>=3.0.0 <=4.0.3) +131 more potentially affected by CVE-2025-14284 via @tiptap/extension-link (>=2.0.0-beta.18 <=2.10.3)

@tiptap/extension-link NPM version =2.0.0-beta.18, =0.5.27, =3.0.0, =0.4.1, =3.0.0-alpha.1, =0.0.1, =0.2.1, =0.2.0, =0.1.0, =0.28.0, =3.4.0, =1.2.0, =0.0.3, =0.4.1 and more Source cves: CVE-2025-14284 Source advisory: SNYK:JS-TIPTAPEXTENSIONLINK-14222197...

SUSE CVE-2024-42332

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attac...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in improper restrictions on the displayed layers of the user interface, which allows attackers to perform spear-phishing attacks.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to an improper limitation on the visually displayed layers of the user interface. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

DEBIAN-CVE-2024-42332

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attac...

The vulnerability of the Navigation section in the Google Chrome browser is related to insufficient compliance with policies, which allows attackers to increase their privileges.

The vulnerability of the Navigation section in the Google Chrome browser is related to insufficient compliance with policies. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a series of actions on the user interface...

KLA77550 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Memor...

The vulnerability of the Device OAuth protocol implementation on the software platform based on git for collaborative code development in GitLab EE/CE allows a perpetrator to gain unauthorized access to the API.

The vulnerability of the Device OAuth protocol implementation on the software platform based on Git for collaborative code development in GitLab EE/CE is related to an incorrect restriction on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor,...