Lucene search
K

8025 matches found

CNNVD
CNNVD
added 2021/06/25 12:0 a.m.4 views

IBM Business Process Manager 跨站脚本漏洞

IBM Business Process Manager BPM is a comprehensive business process management platform from IBM, U.S.A. IBM Cloud Pak for Automation is an intelligent software platform for building automation applications in cloud environments from IBM, U.S.A. IBM Cloud Pak for Automation is an intelligent...

6.4CVSS5.6AI score0.00876EPSS
Exploits0References4
NVD
NVD
added 2021/06/24 2:15 p.m.14 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS0.0076EPSS
Exploits0References3
Prion
Prion
added 2021/06/24 2:15 p.m.22 views

Design/Logic Flaw

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS5.3AI score0.0076EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/06/24 1:15 p.m.20 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

5.7AI score0.0076EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2021/06/24 1:15 p.m.38 views

CVE-2021-29961

When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox 89...

4.3CVSS5.5AI score0.0076EPSS
Exploits0
OSV
OSV
added 2021/06/22 12:42 p.m.7 views

SUSE-SU-2021:2125-1 Security update for wireshark

This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can be dissected as Wireshark header field...

8.8CVSS6.5AI score0.04668EPSS
Exploits7References21
Positive Technologies
Positive Technologies
added 2021/06/15 12:0 a.m.1 views

PT-2021-12276 · Ibm · Ibm Financial Transaction Manager

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager versions 3.2.0 through 3.2.8 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within ...

5.4CVSS6.4AI score0.00471EPSS
Exploits0References5
Virtuozzo
Virtuozzo
added 2021/06/09 12:0 a.m.107 views

Virtuozzo Hybrid Infrastructure 4.6 (4.6.0-208)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' operability. The improvements cover compute services, object storage, monitoring, security, localization, and the user interface. Additionally, this release delivers stability...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2018:2890-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.03662EPSS
Exploits4References2
Veracode
Veracode
added 2021/06/05 10:35 a.m.27 views

UI Spoofing

firefox is vulnerable to UI spoofing. The application did not apply correct clipping which allowed an attacker to paint over the user interface...

4.3CVSS2.9AI score0.0076EPSS
Exploits0References5Affected Software6
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.4 views

多款HUAWEI产品 安全漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a security vulnerability that can be exploited by attackers to cause application redirection...

7.4CVSS5.9AI score0.00231EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.5 views

华为智能手机信息泄露漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause interception of video streams during transmission...

5.3CVSS5.9AI score0.00417EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.4 views

华为智能手机访问控制错误漏洞

Huawei Emui is a mobile operating system developed on Android. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a logic bypass vulnerability that could be exploited by attackers to compromise data confidentiality...

7.5CVSS5.9AI score0.00728EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.5 views

华为智能手机访问控制错误漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to a logic bypass vulnerability that could be exploited by attackers to compromise the data security and functional availability of the device...

6.8CVSS5.9AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.5 views

Huawei EMUI/Magic UI 安全漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to business logic errors, which can be exploited by attackers to cause personal information leakage...

3.3CVSS5.8AI score0.00173EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.5 views

华为手机输入验证错误漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in certain Huawei phones that stems from improper array index validation. An attacker can exploit this vulnerability to cause code execution to gain system privileges. The following products and versions...

10CVSS8.9AI score0.00917EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.5 views

华为智能手机缓冲区错误漏洞

Huawei Emui is a mobile operating system based on Android development.Huawei Magic UI is the operating system for Honor phones. A heap overflow vulnerability exists in Huawei EMUI/Magic UI, which can be exploited by an attacker to cause an anomaly in image processing...

7.8CVSS6AI score0.00176EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.7 views

华为智能手机授权问题漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to a credential management error, which can be exploited by attackers to compromise data confidentiality...

7.5CVSS5.8AI score0.00695EPSS
Exploits0References1
OSV
OSV
added 2021/06/02 9:15 p.m.5 views

CVE-2021-29668

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...

5.4CVSS5.9AI score0.00495EPSS
Exploits0References2
OSV
OSV
added 2021/06/02 9:15 p.m.2 views

CVE-2020-4977

IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS6AI score0.00495EPSS
Exploits0References2
Rows per page
Query Builder