2944 matches found
The Rising Cost of Vulnerable APIs and Bot Attacks – A $186 Billion Wake-Up Call for Businesses
How much do bot attacks and API insecurity cost organizations? To answer these questions, Imperva engaged the Marsh McLennan Cyber Risk Intelligence Center to analyze incident data related to vulnerable APIs and bot attacks. Imperva’s latest report, “The Economic Impact of API and Bot Attacks,"...
Mattermost Desktop App fails to safeguard screen capture functionality
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
GHSA-5777-RCJJ-9P22 Mattermost Desktop App fails to safeguard screen capture functionality
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
CVE-2024-39772
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
CVE-2024-39772 Silent Desktop Screenshot Capture
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
CVE-2024-39772 Silent Desktop Screenshot Capture
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
CVE-2024-39772
Summary: CVE-2024-39772 affects Mattermost Desktop App versions
CVE-2024-39772 Silent Desktop Screenshot Capture
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
CVE-2024-46712 drm/vmwgfx: Disable coherent dumb buffers without 3d
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Disable coherent dumb buffers without 3d Coherent surfaces make only sense if the host renders to them using accelerated apis. Without 3d the entire content of dumb buffers stays in the guest making all of the extra...
Security Bulletin: IBM OpenPages vulnerable to exposure of sensitive information through improper authorization controls on APIs. (CVE-2024-35151)
Summary A vulnerability caused by improper authorization checks could allow authenticated users access to sensitive information through APIs. Vulnerability Details CVEID:CVE-2024-35151 DESCRIPTION: IBM OpenPages with Watson could allow authenticated users access to sensitive information through...
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager...
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager...
CVE-2024-5957
CVE-2024-5957 : The provided documents corroborate a vulnerability in Trellix Manager where unauthenticated remote attackers can bypass authentication and gain access to the Manager’s APIs. The exact affected product versions, root cause details, and a formal fix are not specified in the supplied...
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager...
PT-2024-37270 · Imanage · Imanager
Name of the Vulnerable Software and Affected Versions: Manager affected versions not specified Description: This issue allows unauthenticated remote attackers to bypass authentication and gain access to the Manager's APIs. The estimated number of potentially affected devices worldwide is not...
CVE-2024-34650
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel...
CVE-2024-34650
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel...
CVE-2024-34650
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel...
CVE-2024-34650
CVE-2024-34650 affects Samsung CocktailbarService with an improper authorization issue that enables local attackers to access privileged Edge Panel APIs. Affected: CocktailbarService prior to SMR Sep-2024 Release 1. Impact is limited to local access; no remote vector stated. Remediation: upgrade ...