8764 matches found
JTEKT ELECTRONICS Screen Creator Advance Buffer Error Vulnerability
JTEKT ELECTRONICS Screen Creator Advance is a screen development tool from JTEKT ELECTRONICS. A security vulnerability exists in versions prior to JTEKT ELECTRONICS Screen Creator Advance 2 Ver.0.1.1.4 Build01, which stems from the presence of an out-of-bounds read...
PT-2023-19717
Name of the Vulnerable Software and Affected Versions GNU Screen versions through 4.9.0 Description The issue allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. This occurs when GNU Screen is installed setuid or setgi...
JTEKT ELECTRONICS Screen Creator Advance Buffer Error Vulnerability
JTEKT ELECTRONICS Screen Creator Advance is a screen development tool from JTEKT ELECTRONICS. A security vulnerability exists in versions prior to JTEKT ELECTRONICS Screen Creator Advance 2 Ver.0.1.1.4 Build01 that stems from the presence of an out-of-bounds write...
Experts Warn of 'Ice Breaker' Cyberattacks Targeting Gaming and Gambling Industry
A new attack campaign has been targeting the gaming and gambling sectors since at least September 2022, just as the ICE London 2023 gaming industry trade fair event is scheduled to kick off next week. Israeli cybersecurity company Security Joes is tracking the activity cluster under the name Ice...
PT-2023-18847 · Connectwise · Connectwise Automate
Name of the Vulnerable Software and Affected Versions: Connectwise Automate version 2022.11 Description: The issue allows the login screen to be iframed, potentially manipulating users into performing unintended actions. The vendor claims that a Content-Security-Policy HTTP response header is...
CVE-2023-23126: Improper Restriction of Rendered UI Layers or Frames
Connectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and used to manipulate users to perform unintended actions. NOTE: the vendor's position is that a Content-Security-Policy HTTP response header is present to block this attack...
Mozilla Firefox Spoofing Attack
The vulnerability of the full-screen warning message implementation in Mozilla Firefox relates to the possibility that the full-screen notification may be delayed or suppressed, which could lead to data substitution. Exploiting this vulnerability allows a remote attacker to redirect users to a...
About the security content of iOS 15.7.3 and iPadOS 15.7.3
About the security content of iOS 15.7.3 and iPadOS 15.7.3 This document describes the security content of iOS 15.7.3 and iPadOS 15.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
Security Advisory - Data Processing Error Vulnerability in a Huawei Band
A Huawei band has a data processing error vulnerability. Successful exploitation could bypass lock screen authentication.Vulnerability ID:HWPSIRT-2022-11965 This vulnerability has been assigned a CVEID:CVE-2022-48254...
Code injection
Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...
CVE-2023-22499 Interactive permission prompt spoofing in Deno
Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...
MAHO-PBX NetDevancer series cross-site scripting vulnerabilities
The MAHO-PBX NetDevancer series is an IP-PBX system from MAHO-PBX Japan. A security vulnerability exists in the MAHO-PBX NetDevancer series, which is caused by cross-site scripting XSS in the Management screen, which can be exploited by an attacker to execute arbitrary scripts on the web browser ...
MAHO-PBX NetDevancer series operating system command injection vulnerability
The MAHO-PBX NetDevancer series is an IP-PBX system from MAHO-PBX Japan. A security vulnerability exists in the MAHO-PBX NetDevancer, which is caused by an operating system command injection in the Management screen, and can be exploited by a remote attacker to execute arbitrary operating system...
MAHO-PBX NetDevancer series cross-site request forgeing vulnerability
The MAHO-PBX NetDevancer series is an IP-PBX system from MAHO-PBX Japan. A security vulnerability exists in the MAHO-PBX NetDevancer series, which originates from a cross-site request forgery CSRF vulnerability in the Management screen, which could be exploited by an attacker to induce a user to...
MAHO-PBX NetDevancer series operating system command injection vulnerability
MAHO-PBX NetDevancer series is an IP-PBX system from MAHO-PBX Japan. A security vulnerability exists in the MAHO-PBX NetDevancer series, which is caused by an operating system command injection in the Management screen, and can be exploited by an attacker to execute arbitrary operating system...
CVE-2022-36441
An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The Gboard used by different applications can be used to launch and use several other applications that are restricted by the admin...
CVE-2022-36443
An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels wireless and SD card but it is still possible to use a physical connection Ethernet cable without restriction...
CVE-2022-36443
An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels wireless and SD card but it is still possible to use a physical connection Ethernet cable without restriction...
CVE-2022-36441
An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The Gboard used by different applications can be used to launch and use several other applications that are restricted by the admin...