2129 matches found
PT-2022-11295 · Unknown · Ind780 Advanced Weighing Terminals
Name of the Vulnerable Software and Affected Versions: IND780 Advanced Weighing Terminals versions 7.2.10 through 8.0.07 Description: A remote, unauthenticated, directory traversal issue was identified within the web interface. It allows traversing the folders of the affected host by providing a...
CVE-2021-40661: Improper Limitation of a Pathname to a Restricted Directory
A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 SS Label 'IND7808.0.07', Version 7.2.10 June 18, 2012 SS Label 'IND7807.2.10'. It was possible to traverse the folders of the...
Vulnerability fixed in Google Chrome
Google has fixed a vulnerability in Chrome. The vulnerability allows a malicious party to cause a denial-of-service cause or potentially execute arbitrary code. To do so requires the malicious party to induce the victim to open a rogue web page. Google indicates that exploit code is circulating f...
Vulnerabilities fixed in Google Chrome
Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to perform a denial-of-service DoS and execute arbitrary code under the user's privileges to execute. To do this, the malicious party must induce the victim to visit a malicious web page to visit. As...
CVE-2022-3079
Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...
Design/Logic Flaw
Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...
CVE-2022-3079 Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function
Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service...
Festo CPX-CEC-C1 and CPX-CMXX
SUMMARY Unauthenticated access to critical webpage functions e.g. reboot may cause a denial of service of the device. 2. IMPACT CPX-CEC-C1 and CPX-CMXX allow unauthenticated access to critical webpage functions e.g. reboot which may cause a denial of service of the device 3. REMEDIATION...
The vulnerability of the WebPage rendering module in WebKitGTK, related to the disclosure of information in erroneous data areas, allows attackers to access confidential data.
The vulnerability of the WebPageRendering module in WebKitGTK relates to the disclosure of information in erroneous data areas. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
The vulnerability of the WebPage rendering module in WebKitGTK, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WebPageRendering module in WebKitGTK relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the WebPage rendering module in WebKitGTK, related to improper limitation of the number of user interface layers that can be rendered, allows attackers to compromise data integrity.
The vulnerability of the WebPage rendering module in WebKitGTK is related to an improper limitation on the number of user interface layers that can be rendered. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...
The vulnerability of the WebPage rendering module in WebKitGTK, related to insufficient input data validation, allows attackers to compromise data integrity.
The vulnerability of the WebPage rendering module in WebKitGTK is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...
Soledad < 8.2.5 - Reflected Cross-site Scripting
The theme does not sanitise the id,datafiltertype,... parameters in its pencimoreslistpostajax AJAX action, leading to a Reflected Cross-Site Scripting XSS vulnerability. PoC A threat actor can collect the nonce value on the main webpage by searching for it on the ajaxvarmore call: var ajaxvarmor...
Glassdoor: XSS in www.glassdoor.com
Summary: Browser: Chrome Affected URL https://www.glassdoor.com/Location/All-Tesla-Office-Locations-E43129.htm?DIFFICULT=%3E%3Csvg%20onload%3d%26%23x00000000061;%26%23x0000000006c%26%23x0000000065%26%23x0000000072%26%23x000000000741%26%230000000000000041;%20%3C%2fscript%20 Steps To Reproduce: 1. ...
The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge allows a hacker to disclose protected information.
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created web page...
The vulnerability of the Extensions API component in Google Chrome and Microsoft Edge browsers allows a hacker to disclose protected information.
The vulnerability of the Extensions API of Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions prior to Google Chrome 105.0.5195.52, which can be exploited by an attacker to trick users into installing malicious extensions, which may lead to heap corruption via a crafted...
UBUNTU-CVE-2022-2480
Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...