8699 matches found
Improving the URL bar
iOS has hidden the pathname of URLs for some time now, but recently Chrome Canary introduced something similar behind a flag. I'm not involved in the development of Chrome experiment at all, but I've got more than 140 characters worth of opinion on it… We have a real security problem I recently...
McAfee VirusScan Enterprise for Linux User Interface Detection
Binary data mcafeevseldetecthttp.nbin...
KLA10121 SUI vulnerability in Mozilla Firefox
Unspecified vulnerability was found in the Mozilla Firefox. By exploiting this vulnerability malicious users can spoof the address bar. This vulnerability can be exploited remotely at a point related to DOM events via a specially designed JS. Original advisories MFSA Related products...
CVE-2014-2454
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...
CVE-2014-2453
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...
CVE-2014-2455
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface...
Design/Logic Flaw
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...
Design/Logic Flaw
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...
CVE-2014-2455
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface...
CVE-2014-2453
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...
CVE-2014-2454
CVE-2014-2454 is an unspecified vulnerability in the Hyperion Common Admin component of Oracle Hyperion 11.1.2.2/11.1.2.3. The available documents identify that remote attackers could affect confidentiality via unknown vectors related to the User Interface. The NVD entry provides a Network attack...
CVE-2014-2453
CVE-2014-2453 concerns an unspecified vulnerability in the Hyperion Common Admin component of Oracle Hyperion 11.1.2.2 and 11.1.2.3 that could allow remote attackers to affect integrity via unknown vectors related to the User Interface. The available connected sources confirm the affected product...
CVE-2014-2455
Technical details for CVE-2014-2455 are not publicly available in the provided documents. Monitor for updates from official advisories; no specific affected product versions, root cause, or remediation are disclosed here.
CVE-2014-2454
Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...
Fortinet FortiOS User Interface Default Credentials
The remote Fortinet FortiOS user interface uses a known set of default credentials. Knowing these, an attacker with access to the service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
EMC Cloud Tiering Appliance User Interface Default Credentials
The remote EMC Cloud Tiering Appliance user interface uses a known set of default credentials. Knowing these, an attacker with access to the service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Cisco Emergency Responder Cross-Site Scripting Vulnerability
A vulnerability in the Cisco Emergency Responder Cisco ER UserServlet of Cisco ER Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the Cisco ER web interface. The vulnerability is due to insufficient input validation of a...
Cyber Tool Estimates Incident Response Cost for Businesses
A thorough and freely available tool aims to help security professionals and executives anonymously tabulate the costs incurred on enterprises following all manner of cyber-incidents. Called CyberTab, the tool was created by The Economist Intelligence Unit and sponsored by the consulting firm Boo...
GUI Bugs Expose Information Disclosure, Privilege Escalation
Developers are creating countless information disclosure and privilege escalation vulnerabilities by misusing elements of various graphical user interfaces as a mechanisms for access control, according to a new research paper from the Northeastern University College of Computer and Information...