9907 matches found
HCL BigFix Platform ่พๅ ฅ้ช่ฏ้่ฏฏๆผๆด
HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL BigFix WebUI that originates from a...
The vulnerability of the Microsoft OneNote note-taking software, related to errors in information presentation on the user interface, allows a hacker to perform spoofing attacks.
The vulnerability of the Microsoft OneNote note-taking software relates to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
The vulnerability of Windows Admin Centerโs server management tool, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Windows Admin Center WAC management tool is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
The vulnerability of the Microsoft Outlook email client, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft Outlook email client is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Fides ่ตๆบ็ฎก็้่ฏฏๆผๆด
Fides is an open source privacy engineering platform for managing the implementation of data privacy requests in the runtime environment and the enforcement of privacy regulations in code. A resource management error vulnerability exists in Fides versions 2.11.0 through 2.15.1, which stems from...
CVE-2023-36656
Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...
Mattermost ๅฎๅ จๆผๆด
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from the UI's inability to display updated permissions...
Jaeger UI ่ทจ็ซ่ๆฌๆผๆด
Jaeger UI is the web interface for Jaeger. A security vulnerability exists in Jaeger UI versions prior to v.1.31.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the KeyValuesTable component...
PT-2023-3843 ยท Microsoft ยท Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to perfor...
PT-2023-3842
Name of the Vulnerable Software and Affected Versions Microsoft Edge for iOS affected versions not specified Description The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform a spoofing attack...
CVE-2023-38062
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations...
PT-2023-3534 ยท Microsoft ยท Windows Admin Center
Name of the Vulnerable Software and Affected Versions: Windows Admin Center affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...
PT-2023-3520 ยท Microsoft ยท Outlook
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Microsoft Outlook email client. This can allow a remote attacker to conduct spoofi...
KLA50774 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of...
KLA50773 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code...
KLA50770 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...
PT-2023-3841 ยท Microsoft ยท Power Apps
Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps online affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Microsoft Power Apps development environment. Exploitation of this issue...
New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security
Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called Quarantined Domains. "We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including securi...
CVE-2021-39014
IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213650...
Huawei HarmonyOS and EMUI Information Disclosure Vulnerability (CNVD-2023-61744)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...