8791 matches found
CVE-2021-30361
The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS...
CVE-2022-22320
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218367...
PHOENIX CONTACT RAD-ISM-900-EN-* 输入验证错误漏洞
The PHOENIX CONTACT RAD-ISM-900-EN- is a series of wireless modular Ethernet transceivers from PHOENIX CONTACT, Germany. An input validation error vulnerability exists in PHOENIX CONTACT's RAD-ISM-900-EN- device that stems from incorrect input validation. An attacker could exploit this...
PHOENIX CONTACT RAD-ISM-900-EN-* 安全漏洞
The PHOENIX CONTACT RAD-ISM-900-EN- is a series of wireless modular Ethernet transceivers from PHOENIX CONTACT, Germany. A security vulnerability exists in PHOENIX CONTACT's RAD-ISM-900-EN- devices, which stems from an incorrect validation of integrity check values. An attacker could exploit the...
CVE-2022-29126
Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...
CVE-2021-39024
IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc USA. Google Chrome suffers from a resource management error vulnerability that stems from Browser UI reuse after release. A remote attacker can exploit this vulnerability to trick a victim into visiting a specially crafted web page, triggering a...
SAP Web Dispatcher 跨站脚本漏洞
SAP Web Dispatcher is a core component of Load Balancing from SAP, which supports load balancing and provides reverse proxy functionality to enable external users to access internal applications. A cross-site scripting vulnerability exists in SAP Web Dispatcher and SAP Netweaver AS for ABAP and...
CVE-2022-22320
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218367...
IBM Guardium Data Encryption 跨站脚本漏洞
IBM Security Guardium Data Encryption is an application from IBM USA that provides a modular set of encryption, tokenization, and key management solutions that enable organizations to protect data in local and hybrid multi-cloud environments. IBM Guardium Data Encryption GDE 4.0. 0.0.0 and 5.0.0....
KLA12526 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service, spoof user interface. Below is a complete list of...
Microsoft Tablet Windows User Interface 竞争条件问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Tablet Windows User Interface for competitive conditions. The following products and versions are affected: Windows Server, version 20H2 Server Cor...
SUSE-SU-2022:1582-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.1.0 ESR. Fixed: Various stability, functionality, and security fixes MFSA 2021-40 bsc1190269, bsc1190274: CVE-2021-38492: Navigating to mk: URL scheme could load Internet Explor...
CVE-2022-23332
Command injection vulnerability in Manual Ping Form Web UI in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field...
CVE-2022-23332
Command injection vulnerability in Manual Ping Form Web UI in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field...
CVE-2021-39024
IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
PT-2022-15936 · Shenzhen Ejoin Information Technology Co. · Acom532 +2
Name of the Vulnerable Software and Affected Versions: Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 versions 609-915-041-100-020 Description: A command injection issue exists in the Manual Ping Form of the Web UI, allowing a remote attacker to inject arbitrary code via ...
Shenzhen Ejoin Information Technology Manual Ping Form 代码注入漏洞
Shenzhen Ejoin Information Technology Manual Ping Form is a manual ping form component from Shenzhen Ejoin Information Technology Shenzhen, China. A code injection vulnerability exists in Manual Ping Form Web UI, which originates from a command injection issue in the Web UI of Manual Ping Form. A...
PT-2022-9852 · Hcl +1 · Hcl Bigfix Webui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a cookie without the HTTPONLY flag set. It is mentioned that NUMBER cookies was set without Secure or HTTPOnly flags. The images show...