8780 matches found
IBM Workload Scheduler Cross-Site Scripting Vulnerability
IBM Workload Scheduler is a suite of enterprise task scheduling software from IBM in the United States. The software automates the control of workloads. A cross-site scripting vulnerability exists in IBM Workload Scheduler 9.3.0.4 and earlier versions. An attacker can exploit this vulnerability t...
CVE-2020-0114
In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...
KLA11812 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Diagnostic Hub...
KLA11813 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Internet Explorer...
CVE-2020-6498
Incorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
The vulnerability of Oracle Siebel’s EAI and SWSE platform’s UI framework allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Oracle Siebel UI Framework components is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...
CVE-2020-13830
An issue was discovered on Samsung mobile devices with P9.0 software. One UI HOME logging can leak information. The Samsung ID is SVE-2019-16382 June 2020...
CVE-2020-4183
IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174739...
Cross-site Scripting (XSS)
Overview elastic-app-search is a Ruby client for the Elastic App Search. Affected versions of this package are vulnerable to Cross-site Scripting XSS. They contain a cross site scripting XSS flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result,...
Cisco IOS XE Software Command Injection Vulnerability
Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in the Web UI in Cisco IOS XE Software, which stems from a lack of validation of user input. An attacker can exploit this vulnerability by...
IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2020-32649)
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security Guardium. ...
Cisco IOS XE Command Injection Vulnerability (CNVD-2020-31962)
Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in the Web UI of the Cisco IOS XE Software, which arises from the program not properly cleaning up input. The vulnerability can be exploite...
Cisco IOS XE Code Issue Vulnerability
Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A code issue vulnerability exists in the Web UI in Cisco IOS XE Software, which stems from the presence of a proxy service on a specific endpoint of the UI. An attacker could explo...
Cisco IOS XE Command Injection Vulnerability (CNVD-2020-31974)
Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in the Web UI in Cisco IOS XE, which stems from the program failing to perform sufficient input validation for HTTP requests. A remote...
Google Chrome Spoofing Vulnerability (CNVD-2020-32323)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the user interface of Google Chrome prior to version 83.0.4103.88 iOS. The vulnerability can be exploited by remote attackers to spoof domain names with the help of specially crafted HTML pages...
Unspecified vulnerability in Google Chrome permissions
Google Chrome is a web browser from Google, Inc. permissions is one of the permissions components. A security vulnerability exists in permissions in Google Chrome versions prior to 80.0.3987.87, which can be exploited by remote attackers to spoof a secure user interface with the help of specially...
Cisco IOS XE Backlink Vulnerability
Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A backlink vulnerability exists in the Web UI in Cisco IOS XE Software. An attacker could exploit this vulnerability to read arbitrary files on the underlying file system...
DEBIAN-CVE-2020-6502
Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...
