Spoofing

This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing...

CVE-2019-7284

This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing...

CVE-2019-7284

CVE-2019-7284 affects Apple iOS where processing a maliciously crafted mail message may lead to S/MIME signature spoofing. The issue was addressed with improved checks and is fixed in iOS 12.2. The available connected documents confirm the affected component as Mail/S/MIME processing and cite the...

CVE-2019-7284: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing...

PT-2019-18512

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 Description The issue allows S/MIME signature spoofing when processing a maliciously crafted mail message. Recommendations For iOS versions prior to 12.2, update to iOS 12.2 to resolve the issue...

ASUS ZenFone 3s Max Access Control Error Vulnerability (CNVD-2020-14791)

The ASUS ZenFone 3s Max is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 3s Max. The vulnerability stems from a network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit th...

Xiaomi 5S Plus Access Control Error Vulnerability

The Xiaomi 5S Plus is a smartphone from Chinese company Xiaomi Technology Xiaomi. An access control error vulnerability exists in the com.miui.powerkeeper app in Xiaomi 5S Plus build fingerprint: Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys. The vulnerability stems from the network...

The vulnerability of the S Pip content management system, related to the disclosure of user information, allows a violator to gain unauthorized access to this information.

The vulnerability of the Scribunto content management system is related to the disclosure of user information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information...

The vulnerability of the S Pip content management system lies in the lack of measures taken to protect the website structure, allowing attackers to compromise the integrity of the data.

The vulnerability of the Scribunto content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the S Pip content management system lies in the redirection of URLs to unreliable websites, allowing attackers to compromise data integrity.

The vulnerability of the Scribunto content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the data...

ASUS ZenFone 3s Max Access Control Error Vulnerability

The ASUS ZenFone 3s Max is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 3s Max. The vulnerability stems from a network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit th...

The vulnerability of the S Pip content management system, related to incorrect authorization, allows a violator to compromise data integrity.

The vulnerability of the Scribunto content management system is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the data integrity...

CVE-2019-5259

CVE-2019-5259 is an information-leakage vulnerability affecting Huawei Enterprise routers including AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, and AR3600. According to linked sources, an attacker with low privileges can run specific commands to vie...

Fedora Update for nss FEDORA-2019-8fbc65ef9e

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS : Thunderbird regression (USN-4202-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4202-2 advisory. USN-4202-1 fixed vulnerabilities in Thunderbird. After upgrading, Thunderbird created a new profile for some users. This update fixes the problem. We apologize fo...

[SECURITY] Fedora 30 Update: nss-3.47.1-4.fc30

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

PT-2019-17541

Name of the Vulnerable Software and Affected Versions Huawei AR120-S version Huawei AR1200 version Huawei AR1200-S version Huawei AR150 version Huawei AR150-S version Huawei AR160 version Huawei AR200 version Huawei AR200-S version Huawei AR2200 version Huawei AR2200-S version Huawei AR3200 versi...

Ubuntu: Security Advisory (USN-4202-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenBSD Hit with Authentication, LPE Bugs

An authentication bypass and three local privilege-escalation LPE bugs have been uncovered in OpenBSD, the Unix-like open-source operating system known for its security protections. The most severe of the vulnerabilities is the bypass CVE-2019-19521, which is remotely exploitable. OpenBSD uses BS...

CVE-2019-19522

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root...