ROS-20260914-73-0080

The vulnerability of the Paint component in Google Chrome and Microsoft Edge browsers relates to the ability to bypass authentication by using a user-controlled password. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge browsers relates to the ability to bypass authentication by using a user-controlled password. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260716-73-0016

The vulnerability of Google Chrome’s Blink rendering module involves bypassing authentication using a password that is controlled by the user. Exploiting this vulnerability allows an attacker to remotely replace the user’s interface...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Blink rendering module involves bypassing authentication using a password that is controlled by the user. Exploiting this vulnerability allows an attacker to remotely replace the user’s interface...

The vulnerability of the Nginx UI server’s user interface, related to bypassing authentication using a user-controlled password, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Nginx UI server’s user interface relates to bypassing authentication using a password that is controlled by the user. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the cgi-bin/ocap/ component of the AbsysNet library system, which allows a hacker to execute an attack using brute-force methods.

The vulnerability of the cgi-bin/ocap/ component of the AbsysNet library system is related to the ability to bypass authentication by using a user-controlled password. Exploiting this vulnerability could allow an attacker operating remotely to execute a brute-force attack...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...