8747 matches found
CVE-2024-44248
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with screen sharing access may be able to view another user's screen...
CVE-2024-44248
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A user with screen sharing access may be able to view another user's screen...
CVE-2024-44248
This CVE concerns Apple macOS Screen Sharing Server. The affected software is macOS Ventura and Sonoma (fixed in Ventura 13.7.2 and Sonoma 14.7.2). The underlying issue stems from state management allowing a user with screen sharing access to view another user’s screen. The NVD entry flags a Conf...
PT-2025-35158
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.2 Description An application may be able to record the screen without a visible indicator. This issue was addressed with improved checks. Recommendations Update to macOS version 15.2...
PT-2024-36352 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue allows an attacker with physical access to an iOS device to view notification content from the lock screen. This is possible due t...
PT-2025-3048
Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description The issue is related to errors in state management of the Keyboard Event Handler component in MacOS operating systems. Exploitation of this...
PT-2024-30639 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to the onPrimaryClipChanged method in ClipboardListener.java, which could allow an attacker to partially bypass the lock screen. This could lead to a local escalati...
ASB-A-317048495
Bulletin has no description...
Multiple FCNT Android devices vulnerable to authentication bypass
Overview Multiple FCNT Android devices provide security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc. The devices contain an authentication bypass vulnerability CWE-306, where, under certain conditions, the setting pages may be accessed without...
FCNT 访问控制错误漏洞
FCNT is a cell phone service from FCNT. FCNT suffers from an access control error vulnerability that originates under certain conditions when an attacker can directly manipulate the device with the user's unlocked screen, exposing the settings page of a provided security feature and/or changing...
CVE-2024-54124: Incorrect Authorization
In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen...
Click Studios Passwordstate 安全漏洞
Click Studios Passwordstate passwordstate is a password management software from the Click Studios team in Australia. The program provides users with the ability to save their passwords, record their accounts and passwords, and keep them safe. This program offers you the possibility to keep a...
PT-2024-36056 · Click Studios · Passwordstate
Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate versions prior to build 9920 Description: The issue concerns a potential permission escalation on the edit folder screen. Recommendations: For versions prior to build 9920, update to a version that includes the fix...
CVE-2024-54124
Click Studios Passwordstate versions prior to build 9920 are susceptible to a potential permission escalation vulnerability on the edit folder screen . This flaw allows for unauthorized access or actions within the password management software. To remediate this issue, users should update to a ve...
Fuji Electric Monitouch V-SFT 缓冲区错误漏洞
Fuji Electric Monitouch V-SFT is a screen configuration software from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric Monitouch V-SFT that stems from a lack of proper validation of user-supplied data, which could result in writes beyond the end of the allocated buffer. A...
JVN#87182660: WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting
WordPress Plugin "WP Admin UI Customize" provided by gqevu6bsiz contains a stored cross-site scripting vulnerability CWE-79. Impact If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are...
CVE-2024-53278: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen...
macOS 14.x < 14.7.1 Multiple Vulnerabilities (121570)
The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.1. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An...
