Lucene search
K

8021 matches found

RedHat Linux
RedHat Linux
added 2022/11/21 4:21 p.m.3 views

Mozilla: Custom mouse cursor could have been drawn over browser UI

The Mozilla Foundation Security Advisory describes this flaw as: If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

6.1CVSS7.3AI score0.00728EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/21 12:53 p.m.3 views

Mozilla: Custom mouse cursor could have been drawn over browser UI

The Mozilla Foundation Security Advisory describes this flaw as: If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

6.1CVSS7.3AI score0.00728EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/21 12:40 p.m.6 views

Mozilla: Custom mouse cursor could have been drawn over browser UI

The Mozilla Foundation Security Advisory describes this flaw as: If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

6.1CVSS7.3AI score0.00728EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/21 11:35 a.m.5 views

Mozilla: Custom mouse cursor could have been drawn over browser UI

The Mozilla Foundation Security Advisory describes this flaw as: If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

6.1CVSS7.3AI score0.00728EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/21 11:29 a.m.4 views

Mozilla: Custom mouse cursor could have been drawn over browser UI

The Mozilla Foundation Security Advisory describes this flaw as: If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

6.1CVSS7.3AI score0.00728EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/21 11:11 a.m.2 views

Mozilla: Custom mouse cursor could have been drawn over browser UI

The Mozilla Foundation Security Advisory describes this flaw as: If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

6.1CVSS7.3AI score0.00728EPSS
Exploits0References6
Fedora
Fedora
added 2022/11/21 12:51 a.m.35 views

[SECURITY] Fedora 35 Update: js-jquery-ui-1.13.2-1.fc35

A curated set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript Library...

6.1CVSS1.7AI score0.01933EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/11/21 12:0 a.m.25 views

Fedora: Security Advisory for js-jquery-ui (FEDORA-2022-7291b78111)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.6AI score0.01933EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/11/18 12:0 a.m.63 views

Ubuntu 20.04 LTS / 22.04 LTS : WebKitGTK vulnerabilities (USN-5730-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5730-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website,...

8.8CVSS6.7AI score0.0141EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/11/17 12:0 a.m.3 views

IBM Business Automation Workflow 跨站脚本漏洞

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. A security vulnerability exists in IBM Business...

5.4CVSS6AI score0.00371EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/11/17 12:0 a.m.6 views

PT-2022-24402 · Ibm · Ibm Business Automation Workflow

Name of the Vulnerable Software and Affected Versions: IBM Business Automation Workflow affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...

5.4CVSS5.3AI score0.00371EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/11/16 12:0 a.m.5 views

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface, which allow attackers to perform spear-phishing attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities allows a malicious actor to perform spear-phishing attacks through a series of pop-up calls...

9.4CVSS7.2AI score0.007EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/11/16 12:0 a.m.4 views

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird, related to information representation errors in the user interface, allow attackers to perform spear-phishing attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow attackers to perform spear-phishing attacks by making a series of pop-up windows and calls to...

9.4CVSS6.9AI score0.00696EPSS
Exploits0References11Affected Software6
OSV
OSV
added 2022/11/15 9:15 p.m.4 views

CVE-2022-40753

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688...

5.4CVSS5.4AI score0.00365EPSS
Exploits0References2
OSV
OSV
added 2022/11/15 3:15 p.m.2 views

CVE-2022-3895

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

6.1CVSS5.9AI score0.00271EPSS
Exploits0References1
NVD
NVD
added 2022/11/15 3:15 p.m.20 views

CVE-2022-3895

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

6.1CVSS0.00271EPSS
Exploits0References1
Prion
Prion
added 2022/11/15 3:15 p.m.22 views

Design/Logic Flaw

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

5.8CVSS6.3AI score0.00271EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2022/11/15 2:24 p.m.21 views

CVE-2022-3895 Potential XSS in common user interface component library

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

4CVSS6.5AI score0.00271EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/11/15 2:24 p.m.8 views

CVE-2022-3895 Potential XSS in common user interface component library

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

4CVSS6.3AI score0.00271EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/11/15 12:0 a.m.5 views

Jenkins Plugin BART 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

5.4CVSS5.6AI score0.00602EPSS
Exploits0References6
Rows per page
Query Builder