6967 matches found
Windows DWM Privilege Escalation
The vulnerability of the Windows DWM library in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Mattermost Server: Files may be rendered inline instead of downloaded, allowing script execution
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window...
Firefox ESR Fullscreen UI Spoofing
The vulnerability of the notification interface in the fullscreen UI mode of Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an error that occurs when reusing existing pop-up windows. Exploiting this vulnerability allows a remote attacker to carry out spoofing...
Mozilla: Fullscreen notification bypass using popups
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when reusing existing popups; Firefox allowed them to cover the fullscreen notification UI, which possibly enabled browser spoofing attacks...
new packages: matchbox-window-manager
An update is available for matchbox-window-manager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...
PT-2022-38204
Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.4 Description An issue with state handling allows a person with physical access to a Mac to bypass the Login Window. Recommendations Update to macOS Monterey 12.4...
GHSA-99HJ-PPG3-2XWC Cross-Site Request Forgery in Jenkins
A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after startup during which Jenkins may no longer show the 'Please wait while Jenkins is getting ready t...
CVE-2021-46788
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations...
Privilege escalation
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations...
CVE-2021-46788
CVE-2021-46788 is documented as a Huawei EMUI/Magic UI vulnerability affecting the iConnect module where third-party pop-up overlays can be overridden, potentially misleading users into performing incorrect actions. Connected records identify Huawei EMUI and Magic UI as affected on Android platfo...
PT-2022-12922
Name of the Vulnerable Software and Affected Versions iConnect module affected versions not specified Description The issue concerns a third-party pop-up window coverage vulnerability in the iConnect module. Successful exploitation of this issue may cause system pop-up windows to be covered,...
CVE-2021-46788: Undefined Security Weakness
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations...
CVE-2022-28873
A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...
F-Secure SAFE 安全漏洞
F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE that originates in the Javascript window.open function that leads to an address bar spoofing attack...
CVE-2022-20007
In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges neede...
xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access
A flaw was found in xorg-x11-server where an out-of-bounds access can occur in the SProcScreenSaverSuspend function...
Moderate: cairo and pixman security and bug fix update
Cairo is a 2D graphics library designed to provide high-quality display and print output. Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fixes: cairo: libreoffice slideshow aborts with stack smashing in cairo's compositeboxes CVE-2020-35492 For more details abo...
ALSA-2022:1917 Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream...
Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Xwayland is an X server for running X clients under Wayland. The following packages have been upgraded to a later upstream...
WordPress External Links in New Window / New Tab plugin <= 1.42 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress External Links in New Window / New Tab plugin versions = 1.42. Solution Update the WordPress External Links in New Window / New Tab plugin to the latest available version at least 1.43...