Lucene search
K

8023 matches found

CNNVD
CNNVD
added 2022/03/15 12:0 a.m.5 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a resource management error vulnerability that stems from post-release reuse in the browser UI...

9.6CVSS8.2AI score0.00764EPSS
Exploits1References13
OSV
OSV
added 2022/03/14 5:15 p.m.1 views

CVE-2021-39055

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.8AI score0.00461EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/03/14 12:0 a.m.2 views

PT-2022-15609 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: The issue allows an app to potentially spoof system notifications and UI. This was addressed with a new entitlement. Recommendations: For versions prior to 12.3, update to macOS Monterey 12.3 to resol...

5.5CVSS5.7AI score0.00601EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.4 views

IBM Spectrum Copy Data Management 跨站脚本漏洞

IBM Spectrum Copy Data Management is an implementation of International Business Machines Corporation IBM to modernize, simplify, and automate data center copy management processes.A cross-site scripting vulnerability exists in IBM Spectrum Copy Data Management versions 2.2.0.0 inclusive through...

5.4CVSS5.6AI score0.00461EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/03/14 12:0 a.m.3 views

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey versions prior to 12.3, which stems from an error in the System Preferences feature. Native applications can spoof system notificatio...

5.5CVSS6.7AI score0.00601EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2022/03/12 12:0 a.m.8 views

@0x0c/nestjs-swagger (>=6.1.5 <=6.3.1), @1creator/backend (>=1.1.17 <=1.2.151) +1107 more potentially affected by CVE-2021-46708 via swagger-ui-dist (>=3.0.17 <=4.1.2)

swagger-ui-dist NPM version =3.0.17, =6.1.5, =1.1.17, =1.1.0-beta.1, =15.0.0, =0.1.0-alpha.1, =0.2.4, =1.2.0, =3.7.0, =1.0.0, =1.0.0, =1.0.0, =1.7.8, =2.2.2, =2.5.0 and more Source cves: CVE-2021-46708 Source advisory: OSV:GHSA-6C9X-MJ3G-H47X...

6.1CVSS6.6AI score0.01437EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2022/03/11 5:54 p.m.6 views

CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...

5.5CVSS6.4AI score0.00551EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/03/11 5:54 p.m.33 views

CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...

5.5CVSS6.5AI score0.00551EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.5 views

The vulnerability of PowerShell command interpreters, related to errors in information representation by the user interface, allows attackers to perform spoofing attacks.

The vulnerability of PowerShell command interpreters is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

5.5CVSS6.6AI score0.0232EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/03/10 5:47 p.m.3 views

CVE-2022-25817

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent...

3.3CVSS5.8AI score0.00102EPSS
Exploits0References1
OSV
OSV
added 2022/03/10 5:44 p.m.4 views

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

6.1CVSS5.8AI score0.01085EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.4 views

HUAWEI EMUI 安全漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to unauthorized access, which could be exploited by attackers to compromise confidentiality...

7.5CVSS5.8AI score0.0072EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.3 views

HUAWEI EMUI 缓冲区错误漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI IFAA modules are vulnerable to an out-of-bounds read vulnerability, which can be exploited by attackers to cause a stack overflow...

10CVSS6AI score0.01047EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.4 views

HUAWEI EMUI和Honor Magic Ui 安全漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Wi-Fi modules have a privilege control vulnerability that could be exploited by attackers to obtain sensitive information...

6.5CVSS5.9AI score0.00264EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.3 views

Huawei EMUI和Huawei Magic UI 安全漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Nearby modules are vulnerable to authorization issues that could be exploited by attackers to compromise availability and integrity...

9.1CVSS5.8AI score0.00679EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.3 views

HUAWEI EMUI/Magic UI 安全漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. a security vulnerability exists in Huawei Emui and Magic UI, which stems from improper access control of the video module. An attacker could exploit this vulnerability to...

7.5CVSS5.9AI score0.00701EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/09 5:15 p.m.7 views

CVE-2022-24460

Tablet Windows User Interface Application Elevation of Privilege Vulnerability...

7.6CVSS7.1AI score0.01897EPSS
Exploits0References3Affected Software14
OSV
OSV
added 2022/03/09 5:15 p.m.3 views

CVE-2022-24460

Tablet Windows User Interface Application Elevation of Privilege Vulnerability...

7CVSS7.3AI score0.01897EPSS
Exploits0References1
Prion
Prion
added 2022/03/09 5:15 p.m.25 views

Privilege escalation

Tablet Windows User Interface Application Elevation of Privilege Vulnerability...

7.6CVSS6.9AI score0.01897EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2022/03/09 5:7 p.m.236 views

CVE-2022-24460

Technical details for CVE-2022-24460 are not publicly provided in the supplied documents; no concrete affected product versions or remediation are specified. Monitor for updates.

7.6CVSS7.6AI score0.01897EPSS
Exploits0References1Affected Software5
Rows per page
Query Builder