CVE-2023-32145: Use of Hard-coded Password

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

Oracle Workflow Admin Screens Grants UI Code Execution

The vulnerability of the Admin Screens and Grants UI components in the Oracle Workflow system, a component of the Oracle E-Business Suite for enterprise automation, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to...

IBM WebSphere Automation cross-site scripting vulnerability

IBM WebSphere Automation is an operations platform from International Business Machines IBM that automates operational activities to proactively reduce security risks and accelerate threat remediation. A cross-site scripting vulnerability exists in IBM WebSphere Automation version 1.7.0, which ca...

SolarWinds Platform UI Code Execution

The vulnerability of the user interface of SolarWinds software for network monitoring and IT infrastructure management is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Networks Components Microsoft Edge Google Chrome Information Disclosure

The vulnerability of Microsoft Edge and Google Chrome browsers’ Networks component is related to improper limitation of the number of user interface layers or frames displayed. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential information...

CVE-2022-36028

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the returnto cookie. Versions 2.13.0 contains a patch for the issue...

CVE-2022-36029

CVE-2022-36029 affects Greenlight (end-user UI for BigBlueButton). The issue is an open redirect on the Login page caused by the unchecked value of the return_to cookie in versions prior to 2.13.0. A patch was released in 2.13.0 to fix this. The connected sources confirm the vulnerable component ...

CVE-2022-36029 BigBlueButton Greenlight Open Redirect vulnerability

Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the returnto cookie. Versions 2.13.0 contains a patch for the issue...

PT-2024-28350

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description An unauthenticated remote attacker can deceive users into performing unintended actions due to improper restriction of rendered UI layers or frames. Recommendations At the moment, there is n...

PT-2024-3189 · Ibm · Ibm Cloud Pak For Security +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.10.19.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue is related to stored cross-site scripting, allowing users to embed arbitrary JavaScript code ...

Microsoft Edge UI Layer Spoofing

The vulnerability of Microsoft Edge relates to improper limitation of the layers or frames that are displayed on the user interface. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

LLM User Interface Code Execution

The vulnerability of the user interface of the software for running large language models LLM GPT NVIDIA ChatRTX for Windows exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, cause service...

CVE-2024-29003

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...

CVE-2024-29001

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited...

CVE-2024-29001

A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited...

CVE-2024-29003 SolarWinds Platform Cross Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...

CVE-2024-29003

CVE-2024-29003 affects the SolarWinds Platform, specifically a cross-site scripting flaw in the maps section of the UI. The vulnerability requires authentication and user interaction to exploit and can expose data via XSS. The issue is documented across multiple sources (NVD/NCSC/Red Hat/RH advis...

CVE-2024-29003 SolarWinds Platform Cross Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...

CVE-2024-29001

CVE-2024-29001 is a SolarWinds Platform SWQL Injection vulnerability identified in the user interface that requires authentication and user interaction to exploit. Connected sources corroborate this as a UI SWQL/SQL-injection issue with high impact (confidentiality, integrity, availability) and a...

KLA65692 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An...