The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

KLA12272 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A memory safety vulnerability can be exploited to execute arbitrary...

DEBIAN-CVE-2021-30619

Chromium: CVE-2021-30619 UI Spoofing in Autofill...

UBUNTU-CVE-2021-30621

Chromium: CVE-2021-30621 UI Spoofing in Autofill...

CVE-2021-30621

Chromium: CVE-2021-30621 UI Spoofing in Autofill...

AdaptiveScale LXDUI 信任管理问题漏洞

AdaptiveScale LXDUI is a Web UI for LXD/LXC based Linux containers. A security vulnerability exists in AdaptiveScale LXDUI that can be exploited by an attacker to gain administrative access to the host system...

Aruba Operating System Cross-Site Request Forgery Vulnerability (CNVD-2021-77608)

Aruba Operating System is the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, Inc. user interface to perform file deletion operations...

CVE-2021-34732

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input...

PT-2021-7630 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for iOS affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing a remote attacker to conduct spoofing attacks. Recommendations: At the...

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 RTU in transformer substations, related to errors in information representation by the user interface, allows a intruder to perform arbitrary actions.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 RTU-based transformer automation systems is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform arbitrary actio...

IBM Planning Analytics 跨站脚本漏洞

IBM Planning Analytics, a planning, budgeting, forecasting and analytics solution, is vulnerable to a cross-site scripting vulnerability in IBM Planning Analytics version 2.0. An attacker could use this vulnerability to embed arbitrary JavaScript code in the Web UI, which could change the intende...

KLA12270 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after...

The vulnerability of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, is related to insufficient protection of the web page structure, allowing a hacker to execute arbitrary code.

The vulnerabilities of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, are related to insufficient protection of the web page structure. Exploiting these vulnerabilities allows a malicious actor to execute...

CVE-2021-29852

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205528...

CVE-2021-22021

VMware vRealize Log Insight 8.x prior to 8.4 contains a Cross Site Scripting XSS vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a malicious payload via the Log Insight UI which would be executed when the victim accesses the shared...

CVE-2021-29743

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...

OPENSUSE-SU-2021:1209-1 Security update for opera

This update for opera fixes the following issues: opera was updated to version 78.0.4093.147 - CHR-8251 Update chromium on desktop-stable-92-4093 to 92.0.4515.131 - DNA-93036 Opera not starting after closing window. Processes still working. - DNA-94516 Add ‘Detach tab’ entry to tab menu - DNA-945...

CVE-2021-29744

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2016...

adalanche - Active Directory ACL Visualizer and Explorer

Tags: API Documentation, Access, Active Directory, Analysis, Binary, LDAP, Linux, Max, Memory, Parameter, Reverse, Takeover, Windows, pwned, Adalanche adalanche - Active Directory ACL Visualizer - who's really Domain Admin? Adalanche - Active Directory Acl Visualizer - Who'S Really Domain Admin?...