Lucene search
+L

8805 matches found

OSV
OSV
added 2020/01/07 7:15 p.m.13 views

CVE-2019-16154

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack XSS via a parameter of the logon page...

6.1CVSS6.3AI score0.00698EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2020/01/07 12:00 a.m.112 views

KLA11628 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack. Below is a complete list of vulnerabilitie...

8.8CVSS9.6AI score0.02489EPSS
SaveExploits2References3
Wallarm Lab
Wallarm Lab
added 2020/01/02 6:39 p.m.45 views

Putting Wallarm Management Console on a Fast Track

With this update we significantly reduced Elasticsearch load and thereby improved the responsiveness of the user interface with an attack showing up within seconds of being detected. Our new user-friendly interface has a lag time of no more than 5 seconds. The post Putting Wallarm Management...

3.5AI score
SaveExploits0
OSV
OSV
added 2019/12/30 4:15 p.m.10 views

CVE-2019-4623

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168924...

5.4CVSS5.9AI score0.00673EPSS
SaveExploits0References2
Citrix
Citrix
added 2019/12/30 12:00 a.m.11 views

How to Change the Date, Time and Time Zone in CloudBridge

This article provides information on how to set the correct date, time and time zone through the CloudBridge UI...

6.8AI score
SaveExploits0
OSV
OSV
added 2019/12/26 4:15 p.m.6 views

CVE-2019-6014

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

8.8CVSS7.5AI score0.01245EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/12/26 3:16 p.m.29 views

CVE-2019-6014

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

9.1AI score0.01245EPSS
SaveExploits0References2
OSV
OSV
added 2019/12/20 5:15 p.m.7 views

CVE-2019-4555

IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166204...

5.4CVSS5.4AI score0.00772EPSS
SaveExploits0References3
OSV
OSV
added 2019/12/18 6:15 p.m.8 views

CVE-2019-8670

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS6.7AI score0.0092EPSS
SaveExploits0References2
OSV
OSV
added 2019/12/18 6:15 p.m.10 views

CVE-2019-8667

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect...

5.3CVSS5.7AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/18 6:15 p.m.30 views

CVE-2019-8667

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect...

5.3CVSS5.3AI score0.00433EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/18 6:15 p.m.22 views

CVE-2019-8670

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS4.5AI score0.0092EPSS
SaveExploits0References2
NVD
NVD
added 2019/12/18 6:15 p.m.31 views

CVE-2019-8654

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing...

6.5CVSS5.6AI score0.0077EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/18 6:15 p.m.21 views

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect...

5CVSS4.3AI score0.00433EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/12/18 6:15 p.m.27 views

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing...

4.3CVSS5.5AI score0.0077EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/12/18 5:33 p.m.69 views

CVE-2019-8654

CVE-2019-8654 affects Safari/UI spoofing in Safari prior to 13.0.1. The Red Hat and Apple entries confirm an inconsistent user interface issue addressed by improved state management, with a fix released in Safari 13.0.1. Affected platforms listed by Apple include macOS Mojave 10.14.6 and macOS Hi...

6.5CVSS5.9AI score0.0077EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/18 5:33 p.m.34 views

CVE-2019-8654

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing...

5.6AI score0.0077EPSS
SaveExploits0References1
CVE
CVE
added 2019/12/18 5:33 p.m.199 views

CVE-2019-8670

CVE-2019-8670 is an Apple Safari/WebKit UI vulnerability: an inconsistent user interface issue addressed with improved state management. It affects macOS Mojave 10.14.6 and Safari 12.1.2; visiting a malicious site could lead to address bar spoofing. The issue is fixed in those updates (Safari 12....

4.3CVSS4.9AI score0.0092EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/12/18 5:18 p.m.13 views

SUSE-SU-2019:3339-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 68.3esr MFSA 2019-38 bsc1158328 Security issues fixed: - CVE-2019-17008: Fixed a use-after-free in worker destruction bmo1546331 - CVE-2019-13722: Fixed a stack corruption due to incorrect number of...

8.8CVSS8.8AI score0.02994EPSS
SaveExploits3References10
OSV
OSV
added 2019/12/18 1:15 p.m.9 views

CVE-2019-4388

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting XSS attacks by allowing users to embed arbitrary JavaScript code in the Web UI...

4.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
Rows per page
Query Builder