Lucene search
K

8021 matches found

OSV
OSV
added 2023/01/10 10:15 p.m.0 views

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

7.8CVSS7.4AI score0.00481EPSS
Exploits0References1
NVD
NVD
added 2023/01/10 10:15 p.m.18 views

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

7.8CVSS8.2AI score0.00481EPSS
Exploits0References1
OSV
OSV
added 2023/01/10 8:15 p.m.2 views

UBUNTU-CVE-2023-0136

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.4AI score0.00647EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2023/01/10 8:0 a.m.59 views

Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

7.8CVSS8.2AI score0.00481EPSS
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 4:42 a.m.3 views

Malicious code in generic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f87fcdafcf972ad5460dfd5d8fca046c5d3c1545f8725f7dc18174de69c362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Kaspersky
Kaspersky
added 2023/01/10 12:0 a.m.309 views

KLA20150 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Network Service can be exploited to cause denial of...

8.8CVSS9.1AI score0.007EPSS
Exploits0References3
Kaspersky
Kaspersky
added 2023/01/10 12:0 a.m.86 views

KLA20155 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be...

8CVSS8.4AI score0.01595EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2023/01/10 12:0 a.m.22 views

CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

7.8CVSS7.7AI score0.00481EPSS
Exploits0References1
OSV
OSV
added 2023/01/05 7:15 a.m.1 views

CVE-2022-34330

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.4AI score
Exploits0References2
CNNVD
CNNVD
added 2023/01/05 12:0 a.m.3 views

pyload 安全漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A security vulnerability exists in pyload versions prior to 0.5.0b3.dev33, which stems from an improper restriction in its rendering UI...

6.1CVSS4.9AI score0.00456EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/01/05 12:0 a.m.5 views

HUAWEI EMUI/Magic UI 缓冲区错误漏洞

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from the HWKEYMASTER module...

7.5CVSS7.4AI score0.00398EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/01/04 5:0 p.m.4 views

CVE-2022-22352 IBM Sterling B2B Integrator Standard Edition cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.2AI score0.00365EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/04 12:0 a.m.3 views

IBM Sterling B2B Integrator 跨站脚本漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability exists in IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1. An attacker could exploit the...

5.4CVSS6AI score0.00365EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/01/04 12:0 a.m.5 views

PT-2023-8312 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyload versions prior to 0.5.0b3.dev33 Description: The issue is related to improper restriction of rendered UI layers or frames in the pyload software, which can be exploited by a remote attacker to conduct a clickjacking attack. This allows...

6.1CVSS4AI score0.00456EPSS
Exploits0References9
OSV
OSV
added 2022/12/31 3:1 p.m.7 views

OPENSUSE-SU-2022:10254-1 Security update for opera

This update for opera fixes the following issues: - Update to 94.0.4606.38 - CHR-9133 Update chromium on desktop-stable-108-4606 to 108.0.5359.125 - DNA-103624 Create JS API to open Search tabs feature - DNA-104004 Improve welcome pop-up - DNA-104053 Right mouse click open speed dial instead of...

8.8CVSS9AI score0.16109EPSS
Exploits2References7
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.3 views

Oxidized Web 跨站脚本漏洞

Oxidized Web is a Web UI + RESTful API for Oxidized. Oxidized Web suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameter toresearch can lead to cross-site scripting...

5.4CVSS4.2AI score0.00531EPSS
Exploits0References5
Kitploit
Kitploit
added 2022/12/25 11:30 a.m.47 views

OFRAK - Unpack, Modify, And Repack Binaries

OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching strategies...

7.4AI score
Exploits0References7
Fedora
Fedora
added 2022/12/23 1:21 a.m.37 views

[SECURITY] Fedora 36 Update: insight-13.0.50.20220502-4.fc36

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

5.5CVSS2AI score0.00437EPSS
Exploits1
Fedora
Fedora
added 2022/12/23 1:20 a.m.27 views

[SECURITY] Fedora 37 Update: insight-13.0.50.20220502-4.fc37

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

5.5CVSS2AI score0.00437EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/12/23 12:0 a.m.22 views

Fedora: Security Advisory for insight (FEDORA-2022-07d49bd9a8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6AI score0.00437EPSS
Exploits1References2
Rows per page
Query Builder