CVE-2022-36442

CVE-2022-36442 affects Zebra Enterprise Home Screen 4.1.19. The issue arises from the embedded Google Chrome component, enabling installation of unauthorized applications via a downloaded APK. Root cause: abuse of the embedded Chrome within the Zebra app to install software without authorization....

Zebra Technologies Enterprise Home Screen security vulnerabilities

Zebra Technologies Enterprise Home Screen is a free Android app from Zebra Technologies, Inc. provides administrators with an easy way to control access to applications and settings on Zebra devices. A security vulnerability exists in Zebra Technologies Enterprise Home Screen version 4.1.19, whic...

CVE-2022-36441

CVE-2022-36441 affects Zebra Enterprise Home Screen 4.1.19. The Gboard used by different applications can be used to launch and access several administrator-restricted apps, creating a local impact. CVSS v3.1 base score 7.1 (HIGH). Root cause is not elaborated beyond the interaction between Gboar...

CVE-2022-36443: Improper Access Control

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels wireless and SD card but it is still possible to use a physical connection Ethernet cable without restriction...

xorg-x11-server: ScreenSaverSetAttributes use-after-free

A vulnerability was found in X.Org. This issue occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This flaw can lead to local privileges elevation on systems where the X server runs privileged and remote code execution for ssh X...

xorg-x11-server: ScreenSaverSetAttributes use-after-free

A vulnerability was found in X.Org. This issue occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This flaw can lead to local privileges elevation on systems where the X server runs privileged and remote code execution for ssh X...

usememos/memos Improper Authorization vulnerability

In usememos/memos 0.9.0 and prior, an unauthorized user can access any private memo by URL hacking a memo on the editing screen...

Mozilla Firefox resource management error vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox 95, which stems from graphical objects not being properly protected when entering and exiting full-screen mode, resulting in memory...

CVE-2022-26383

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbird 91.7...

CVE-2022-45408

Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

CVE-2021-46856

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-46856

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

Path traversal

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-46856

The CVE-2021-46856 issue affects Huawei HarmonyOS’s multi-screen collaboration module and is described as a path traversal vulnerability that can compromise data confidentiality. Connected documents corroborate the vulnerability in HarmonyOS context, with a CVSSv3.1 base score of 7.5 (HIGH) and a...

CVE-2021-46856

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-46856: Improper Limitation of a Pathname to a Restricted Directory

The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

PT-2022-12946 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this issue may affect data confidentiality. Recommendations: At the moment, there is n...

AZL-44346 CVE-2022-46343 affecting package xorg-x11-server 1.20.10-6

A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution f...

X.Org X Server Resource Management Error Vulnerability

X.Org X Server is an X Window System display server from the X.org Foundation. X.Org X Server suffers from a resource management error vulnerability that stems from the fact that the handler of its ScreenSaverSetAttributes request may write to memory after releasing the request potentially...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox. An attacker could exploit this vulnerability by obfuscating the browser, delaying or suppressing full-screen notifications, leading to potential user...