Red Hat OpenShift 安全特征问题特征问题漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. Red Hat OpenShift GitOps 1.5 suffers from a Security Feature Issue vulnerability that stems from vulnerability to various attacks whe...

CVE-2022-22502

IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

The vulnerability of the client device during the installation and preliminary configuration of new devices under Windows Autopilot of the Microsoft operating system allows attackers to perform spear-phishing attacks.

The vulnerability of the client software for installing and preliminarily configuring new devices under Windows Autopilot of the Microsoft operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the Microsoft Power BI component of the Microsoft On-Premises Data Gateway allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft Power BI local data gateway’s component is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Malicious code in merlin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d7dcf4fcdd9219988153659111f9f161edaceb483c6642ac3ef3c334038c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in music-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3e5a29f1e03c908a98561322b9a9d17c15b951f7e1a38ae5f4c3d82eb29ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6864 Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6682 Malicious code in turicreate-user-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66815d0d6c4ce398580f69bbe13619f1625d74b8e19c5389f6157479e1f1b3d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in turicreate-user-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66815d0d6c4ce398580f69bbe13619f1625d74b8e19c5389f6157479e1f1b3d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shared-ui/global-navigation-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3146f75b07c94a8fd45a30d06312fef2e4562d93ab98b0e3eb67da5051b5082e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @idse/common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf8a80088e5eda0a3d5b7faca5cd4f36b1cc98345a383d657e4313e765efb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bigid-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4155acf29ddb0adae2f2336b9511dcc46c60cb1f01b63e0aa629c87130a81c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UI Redressing

Description The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Proof of Concept 1. Go to this URL:...

The vulnerability of Skype for Business Server in corporate communication servers lies in the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Skype for Business Server’s corporate communication servers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of the Region Mapping sub-component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, ...

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning component of the Oracle E-Business Suite allows a perpetrator to access and modify data.

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning product, a business automation system within the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

USN-5475-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, spoof the browser UI, conduct cross-site scripting XSS attacks, bypass...