CVE-2022-22461
IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive […]
İçeriği inceleyinIf Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system […]
İçeriği inceleyinConstructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to […]
İçeriği inceleyinApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially […]
İçeriği inceleyinMalicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR […]
İçeriği inceleyinCertain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing […]
İçeriği inceleyinWhen resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. This vulnerability affects Firefox […]
İçeriği inceleyinWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This […]
İçeriği inceleyinWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the […]
İçeriği inceleyinWhen viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird […]
İçeriği inceleyinAn attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, […]
İçeriği inceleyinIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved […]
İçeriği inceleyin