9946 matches found
UBUNTU-CVE-2022-23837
In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users...
KLA12433 Security UI vulnerability in Microsoft Browser
Spoofing vulnerability was found in Microsoft Edge for Android. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23258 Exploitation Related products Microsoft-Edge CVE list CVE-2022-23258 warning KB list Solution Install necessary updates from t...
Vulnerabilities fixed in Drupal core
Drupal developers have fixed vulnerabilities in Drupal core. The vulnerabilities are in jQuery UI. It is possible that this security vulnerability could be exploited with some Drupal modules and could result in a Cross-Site Scripting XSS vulnerability. Drupal developers have released updates to f...
DELL EMC AppSync security vulnerabilities
DELL EMC AppSync is a replication data management software from Dell USA Inc. The security vulnerability in DELL EMC AppSync stems from the fact that Dell EMC AppSync versions 3.9 through 4.3 contain an "over-authentication Improper Attempt Limitation" vulnerability, which can be exploited from t...
CVE-2022-22733
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...
PT-2022-15651 · Apache · Apache Shardingsphere Elasticjob-Ui
Name of the Vulnerable Software and Affected Versions: Apache ShardingSphere ElasticJob-UI versions 3.0.0 and prior versions Description: The issue allows an attacker with a guest account to perform privilege escalation due to exposure of sensitive information to an unauthorized actor...
Cisco Webex Meetings Cross-Site Scripting Vulnerability
A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based...
CVE-2022-21381
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...
CVE-2022-21381
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...
CVE-2022-21354
CVE-2022-21354 affects Oracle E-Business Suite iStore UI (versions 12.2.3–12.2.11). An unauthenticated attacker can access over HTTP and, with user interaction, may update/insert/delete and read Oracle iStore data. The issue is confirmed by multiple sources (NVD, Red Hat, NCSC) and is listed with...
CVE-2022-21354: Undefined Security Weakness
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...
Thunderbird Firefox ESR Layer Restriction
The vulnerability of the Thunderbird email client’s user interface, as well as the Firefox and Firefox ESR browsers, is related to an incorrect limitation on the number of visible layers or frames, due to a mistake in adjusting the size of the pop-up window when requesting full-screen access...
PT-2022-12973 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 14.4.5 GitLab versions 14.5.0 through 14.5.3 GitLab versions 14.6.0 through 14.6.1 Description: An issue has been discovered in GitLab where it does not ignore replacement references with git sub-commands. This allows...
PT-2022-2146
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite iStore versions 12.2.3 through 12.2.11 Description The issue is related to insufficient input validation in the User Interface component of Oracle iStore, allowing an unauthenticated attacker with network access via HTT...
CVE-2022-22290
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page...
GitLab security vulnerabilities
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from configuring in a...
Office Online Server Information Representation Spear Phishing
The vulnerability of the Office Online Server web server is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Windows Certificates Spoofing
The vulnerability of Windows operating system certificates is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
Microsoft Office Spear Phishing
The vulnerability of the Microsoft Office suite is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow an attacker to carry out a spear-phishing attack...
