8758 matches found
CVE-2019-9217
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. Its User Interface has a Misrepresentation of Critical Information...
CVE-2019-9217
Removed by vendor...
[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30
This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...
Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31018)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...
Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31016)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...
Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31017)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...
Oracle Trade Management Component Access Control Error Vulnerability
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...
Google DLP Makes It Easier to Safeguard Sensitive Data Troves
Google's Data Loss Prevention tool finds and redacts sensitive data in the cloud. A new user interface makes now makes it more broadly accessible...
CVE-2018-7117
A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...
CVE-2018-7117
CVE-2018-7117 is a remote Cross-Site Scripting (XSS) vulnerability in HP iLO 5 Web UI for Gen10 ProLiant Servers, affecting versions earlier than v1.40. Root cause: improper input validation in the web interface leading to script execution. Affected component: iLO 5 Web User Interface. Exploitati...
CVE-2018-7117
A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...
KLA11461 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office Access Connectivit...
KLA11467 Multiple vulnerabilities in Microsoft Exchange Server
Unspecified vulnerability was found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2019-0858 CVE-2019-0817 Related products Microsoft-Exchange-Server CVE list CVE-2019-0817 high CVE-2019-0858 warning KB list 4491413...
chromium-browser: Excessive permissions for private API in Extensions
Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page...
Debian: Security Advisory (DSA-4421-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-7001
A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions prior to...
NSA Releases GHIDRA Source Code — Free Reverse Engineering Tool
Update 4/4/2019 — Great news. NSA today finally released the complete source code for GHIDRA version 9.0.2 which is now available on its Github repository. GHIDRA is agency's home-grown classified software reverse engineering tool that agency experts have been using internally for over a decade t...
The vulnerability of Google Chrome, related to improper input validation, allows a malicious actor to create a confusing user interface through a specially crafted HTML page.
The vulnerability of Google Chrome relates to improper handling of the alert window display in Blink. Exploiting this vulnerability allows an attacker to create a confusing user interface through a specially created HTML page...