7947 matches found
Information disclosure
Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...
CVE-2022-39913
CVE-2022-39913 concerns the Exposure of Sensitive Information to an Unauthorized Actor in Samsung’s Persona Manager prior to Android T(13). The issue arises from a data exposure that allows a local attacker to access user profiles information. Affected product/area: Persona Manager on devices run...
CVE-2022-39913
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...
Mac OS input source not synchronized correctly to remote applications or desktops
With Citrix Workspace app for Mac 2212 or previous version on Mac OS 13, you might encounter problems that client input sources cannot be synchronized correctly to your remote applications or desktops. For example, for Mac OS 13, the default English input source is English - ABC, while in the pas...
CVE-2022-40968
creationtimestamp| type| source ---|---|--- 2022-12-05 02:39:13+00:00| seen| https://t.me/cibsecurity/53964...
Discourse 信息泄露漏洞
Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. An information disclosure vulnerability exists in Discourse versions 2.8.1 and earlier, and 2.9.0.beta.13 and earlier. An attacker can exploit this vulnerability to...
CVE-2022-37772
creationtimestamp| type| source ---|---|--- 2022-11-23 07:13:30+00:00| seen| https://t.me/cibsecurity/53385...
Information Disclosure
bc-fips is vulnerable to Information Disclosure. The vulnerability exists because the temporary keys used in the module get zeroed out while still in use by the module, resulting in an error or potential information loss. This vulnerability only affects Java 13 or later...
rsync security and bug fix update
3.2.3-18 - Resolves: 2111177 - remote arbitrary files write inside the directories of connecting peers 3.2.3-17 - Resolves: 2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field 3.2.3-16 - Related: 2081296 - Adding ci.fmf for...
Garbage collection issue in BC-FJA in Java 13 and later
An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...
Code injection
An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...
CVE-2022-45146
An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...
Elastic Kibana Reporting Vulnerability (ESA-2021-13)
Elastic Kibana is prone to a reporting vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...
PT-2022-6901 · Oracle +1 · Java +1
Name of the Vulnerable Software and Affected Versions: Bouncy Castle BC-FJA versions prior to 1.0.2.4 Description: An issue in the FIPS Java API of Bouncy Castle BC-FJA is triggered by changes to the JVM garbage collector in Java 13 and later. This issue causes temporary keys used by the module t...
CVE-2022-42904
creationtimestamp| type| source ---|---|--- 2022-11-19 00:29:51+00:00| seen| https://t.me/cibsecurity/53192 2025-04-30 14:13:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14043...
Google to Roll Out Privacy Sandbox Beta on Android 13 by Early 2023
Internet behemoth Google on Tuesday said it plans to roll out Privacy Sandbox for Android in beta to mobile devices running Android 13 starting early next year. "The Privacy Sandbox Beta will be available for ad tech and app developers who wish to test the ads-related APIs as part of their...
seeu.edu.mk Cross Site Scripting vulnerability OBB-3052279
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bookings.zenchef.com Cross Site Scripting vulnerability OBB-3052269
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
destinationmauivacations.com Cross Site Scripting vulnerability OBB-3052067
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...