Lucene search
+L

8758 matches found

Cvelist
Cvelist
added 2019/04/17 4:46 p.m.29 views

CVE-2019-9217

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. Its User Interface has a Misrepresentation of Critical Information...

9.3AI score0.01324EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/04/17 4:46 p.m.47 views

CVE-2019-9217

Removed by vendor...

9.8CVSS7.3AI score0.01324EPSS
SaveExploits0
Fedora
Fedora
added 2019/04/17 4:5 p.m.19 views

[SECURITY] Fedora 30 Update: gnome-control-center-3.32.1-2.fc30

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

2.7AI score
SaveExploits0
CNVD
CNVD
added 2019/04/17 12:0 a.m.6 views

Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31018)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...

8.2CVSS6.9AI score0.01287EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/17 12:0 a.m.8 views

Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31016)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...

8.2CVSS6.9AI score0.01287EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/17 12:0 a.m.5 views

Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31017)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...

8.2CVSS6.9AI score0.01287EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/17 12:0 a.m.6 views

Oracle Trade Management Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...

8.2CVSS6.9AI score0.01287EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2019/04/10 4:35 p.m.59 views

Google DLP Makes It Easier to Safeguard Sensitive Data Troves

Google's Data Loss Prevention tool finds and redacts sensitive data in the cloud. A new user interface makes now makes it more broadly accessible...

2.6AI score
SaveExploits0
OSV
OSV
added 2019/04/09 7:29 p.m.5 views

CVE-2018-7117

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...

6.1CVSS5.8AI score0.01295EPSS
SaveExploits0References2
CVE
CVE
added 2019/04/09 6:28 p.m.111 views

CVE-2018-7117

CVE-2018-7117 is a remote Cross-Site Scripting (XSS) vulnerability in HP iLO 5 Web UI for Gen10 ProLiant Servers, affecting versions earlier than v1.40. Root cause: improper input validation in the web interface leading to script execution. Affected component: iLO 5 Web User Interface. Exploitati...

6.1CVSS6.1AI score0.01295EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/04/09 6:28 p.m.41 views

CVE-2018-7117

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...

6.1AI score0.01295EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2019/04/09 12:0 a.m.55 views

KLA11461 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office Access Connectivit...

9.3CVSS8.3AI score0.18515EPSS
SaveExploits0References30
Kaspersky
Kaspersky
added 2019/04/09 12:0 a.m.36 views

KLA11467 Multiple vulnerabilities in Microsoft Exchange Server

Unspecified vulnerability was found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2019-0858 CVE-2019-0817 Related products Microsoft-Exchange-Server CVE list CVE-2019-0817 high CVE-2019-0858 warning KB list 4491413...

6.1CVSS7.4AI score0.0229EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/04/08 7:48 a.m.9 views

chromium-browser: Excessive permissions for private API in Extensions

Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page...

6.5CVSS7.4AI score0.01003EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2019/04/06 12:0 a.m.293 views

Debian: Security Advisory (DSA-4421-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.07287EPSS
SaveExploits7References4
OSV
OSV
added 2019/04/04 4:29 p.m.5 views

CVE-2019-7001

A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions prior to...

8.8CVSS7.4AI score0.01163EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2019/04/04 1:27 p.m.6 views

NSA Releases GHIDRA Source Code — Free Reverse Engineering Tool

Update 4/4/2019 — Great news. NSA today finally released the complete source code for GHIDRA version 9.0.2 which is now available on its Github repository. GHIDRA is agency's home-grown classified software reverse engineering tool that agency experts have been using internally for over a decade t...

7.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.9 views

The vulnerability of Google Chrome, related to improper input validation, allows a malicious actor to create a confusing user interface through a specially crafted HTML page.

The vulnerability of Google Chrome relates to improper handling of the alert window display in Blink. Exploiting this vulnerability allows an attacker to create a confusing user interface through a specially created HTML page...

6.5CVSS7AI score0.01331EPSS
SaveExploits0References5Affected Software2
NVD
NVD
added 2019/04/03 6:29 p.m.25 views

CVE-2018-4389

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1...

6.5CVSS5.7AI score0.00966EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/03 6:29 p.m.4 views

CVE-2018-4389

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1...

6.5CVSS5.8AI score0.00966EPSS
SaveExploits0References1
Rows per page
Query Builder