CVE-2018-4362

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12...

CVE-2018-4362

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12...

CVE-2018-4279

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2...

CVE-2018-4195

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12...

CVE-2018-4362

CVE-2018-4362 affects Safari/WebKit on macOS and iOS, describing an inconsistent user interface issue that was addressed with improved state management. Public documentation notes that the issue affected versions prior to Safari 11.1.2 and iOS 12, with a fix delivered in Safari 11.1.2 (and corres...

CVE-2018-4279

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2...

CVE-2018-4279

CVE-2018-4279 corresponds to an inconsistent user interface vulnerability in Apple Safari, fixed in Safari 11.1.2. Affected product: Safari on macOS (OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.6) prior to version 11.1.2. Root cause: improved state management was im...

CVE-2018-4260

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...

CVE-2018-4195

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12...

CVE-2018-1731

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1913

IBM DOORS Next Generation DNG/RRC 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-5757

An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to...

Debian DSA-4421-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2019-5787 Zhe Jin discovered a use-after-free issue. - CVE-2019-5788 Mark Brand discovered a use-after-free issue in the FileAPI implementation. - CVE-2019-5789 Mark Brand discovered a use-after-free issue in the...

HP Isaac Mizrahi Smartwatch Security Feature Issue Vulnerability

HP Isaac Mizrahi is an application from Hewlett-Packard HP USA for managing access to the HP Isaac Mizrahi smartwatch. A security vulnerability exists in HP Isaac Mizrahi Smartwatch. An attacker could exploit the vulnerability to steal credentials and hijack the user interface...

CVE-2019-1754

A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged level 1, remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to improper validation of user privileges of web UI users. An attacker...

CVE-2019-1756

A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has...