CVE-2022-29126: Undefined Security Weakness

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc USA. Google Chrome suffers from a resource management error vulnerability that stems from Browser UI reuse after release. A remote attacker can exploit this vulnerability to trick a victim into visiting a specially crafted web page, triggering a...

KLA12526 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service, spoof user interface. Below is a complete list of...

SAP Web Dispatcher 跨站脚本漏洞

SAP Web Dispatcher is a core component of Load Balancing from SAP, which supports load balancing and provides reverse proxy functionality to enable external users to access internal applications. A cross-site scripting vulnerability exists in SAP Web Dispatcher and SAP Netweaver AS for ABAP and...

Microsoft Tablet Windows User Interface 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Tablet Windows User Interface for competitive conditions. The following products and versions are affected: Windows Server, version 20H2 Server Cor...

SUSE-SU-2022:1582-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.1.0 ESR. Fixed: Various stability, functionality, and security fixes MFSA 2021-40 bsc1190269, bsc1190274: CVE-2021-38492: Navigating to mk: URL scheme could load Internet Explor...

CVE-2022-23332

Command injection vulnerability in Manual Ping Form Web UI in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field...

CVE-2022-23332

Command injection vulnerability in Manual Ping Form Web UI in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field...

PT-2022-15936 · Shenzhen Ejoin Information Technology Co. · Acom532 +2

Name of the Vulnerable Software and Affected Versions: Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 versions 609-915-041-100-020 Description: A command injection issue exists in the Manual Ping Form of the Web UI, allowing a remote attacker to inject arbitrary code via ...

CVE-2021-39024

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

Shenzhen Ejoin Information Technology Manual Ping Form 代码注入漏洞

Shenzhen Ejoin Information Technology Manual Ping Form is a manual ping form component from Shenzhen Ejoin Information Technology Shenzhen, China. A code injection vulnerability exists in Manual Ping Form Web UI, which originates from a command injection issue in the Web UI of Manual Ping Form. A...

PT-2022-9852 · Hcl +1 · Hcl Bigfix Webui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a cookie without the HTTPONLY flag set. It is mentioned that NUMBER cookies was set without Secure or HTTPOnly flags. The images show...

CVE-2022-27659: Improper Privilege Management

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, an authenticated attacker can modify or delete Dashboards created by other BIG-IP users in the Traffic Management User Interface TMUI. Note: Software versions which have reach...

PT-2022-18555

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 16.1.2.2 F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6 Description An authenticated attacker can modify or delete Dashboards created by other BIG-IP users in the Traffic Management User...

CVE-2022-25778

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

CVE-2022-25781

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

CVE-2022-25780

Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope...

CVE-2022-25778

Cross-Site Request Forgery CSRF vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from improper handling of permissions in Secomea GateManager's Web UI, and could be exploited to allow logged-in users to...

The vulnerability of Visual Studio Code’s source editor, related to errors in information representation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...