9940 matches found
Oracle iStore Component Unauthorized Access
The vulnerability of the User Interface component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorize...
Microsoft Edge Information Disclosure
The vulnerability of Microsoft Edge relates to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...
Microsoft Teams Information Presentation
The vulnerability of the corporate platform Microsoft Teams is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using specially crafted URLs...
KLA12497 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability in JIT Codegen Extensions...
BizTalk Server ESB Toolkit Spoofing
The vulnerability of the BizTalk Server BizTalk ESB Toolkit relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
PT-2022-11088 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 0.8.0 through 14.2.5 GitLab CE/EE versions 14.3.0 through 14.3.3 GitLab CE/EE versions 14.4.0 Description: The issue allows certain Unicode characters to be abused, enabling the commitment of malicious code into projects...
CVE-2022-24796 Remote Command Injection in RaspberryMatic
RaspberryMatic is a free and open-source operating system for running a cloud-free smart-home using the homematicIP / HomeMatic hardware line of IoT devices. A Remote Code Execution RCE vulnerability in the file upload facility of the WebUI interface of RaspberryMatic exists. Missing input...
CVE-2022-22404
IBM App Connect Enterprise Certified Container Dashboard UI IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1 may be vulnerable to denial of service due to excessive rate limiting...
RaspberryMatic operating system command injection vulnerability
RaspberryMatic is a free and non-commercial open source operating system alternative from the individual developer Jens Maus in Germany. It is used to run cloud-free smart home IoT centers. RaspberryMatic suffers from an operating system command injection vulnerability that stems from a lack of...
Google Android security vulnerabilities
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from an agent obfuscation in the SystemUI that could arbitrarily launch an Activity. An attacker could exploit this vulnerability to cause a...
Google Chrome buffer error vulnerability
Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome due to a boundary error when handling untrusted HTML content in the WebUI. A remote attacker can create a specially crafted web page, trick a victim in...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser from Google Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a resource management error vulnerability that exists due to a use-after-free error in the Cast UI component in Google Chrome. A remote attacker could create a specially crafted web...
Google Chrome buffer error vulnerability
Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome due to a boundary error when handling untrusted HTML content in the WebUI. A remote attacker can create a specially crafted web page, trick a victim in...
CVE-2022-0549
An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not...
Microsoft Office Spear Phishing
The vulnerability of the Microsoft Office suite is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...
Microsoft Defender for Endpoint Windows Spear Phishing
The vulnerability of Microsoft Defender for Endpoint’s Windows operating system is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Google Chrome Spear Phishing
The vulnerability of the Google Chrome browser interface is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created web page...
Tablet Windows User Interface Application Privilege Escalation
The vulnerability of the Tablet Windows User Interface Application component of the Microsoft Windows operating system is related to the use of a common resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to increase their privileges...
Important: Red Hat Security Advisory: Red Hat Virtualization Host security and enhancement update [ovirt-4.4.10] Async #2
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
