Service Update 1.18 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

The vulnerability of the Accessibility component in operating systems like iPadOS, iOS, and macOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accessibility component in iPadOS, iOS, and macOS is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability in the web interface of the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Control Web Panel formerly CentOS Web Panel web interface relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Ad hoc Transfer Module of the WS_FTP Server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ad hoc Transfer Module of the WSFTP Server server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

GoldDigger Android Trojan Targets Banking Apps in Asia Pacific Countries

A new Android banking trojan named GoldDigger has been found targeting several financial applications with an aim to siphon victims' funds and backdoor infected devices. "The malware targets more than 50 Vietnamese banking, e-wallet and crypto wallet applications," Group-IB said. "There are...

The vulnerability of embedded software in Qualcomm products is caused by a situation where hackers can influence the privacy, integrity, and accessibility of protected information.

The vulnerability of embedded Qualcomm software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through calls to the IOCTL munmap command...

Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users

An emerging Android banking trojan called Zanubis is now masquerading as a Peruvian government app to trick unsuspecting users into installing the malware. "Zanubis's main infection path is through impersonating legitimate Peruvian Android applications and then tricking the user into enabling the...

Xenomorph Banking Trojan: A New Variant Targeting 35+ U.S. Financial Institutions

An updated version of an Android banking trojan called Xenomorph has set its sights on more than 35 financial institutions in the U.S. The campaign, according to Dutch security firm ThreatFabric, leverages phishing web pages that are designed to entice victims into installing malicious Android ap...

The vulnerability of the setMAC function in D-Link DIR-816 A2 microprogrammed router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setMAC function in D-Link DIR-816 A2 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the sub_2EF50() function in D-Link DWL-6610AP wireless access points allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub2EF50 function in D-Link DWL-6610AP wireless access points relates to the failure to eliminate special elements used in the operating system’s command for processing the manual-time-string parameter. Exploiting this vulnerability allows an attacker to compromise the...

Google Chrome Accessibility Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome Accessibility, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service...

Design/Logic Flaw

File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the application's webroot directory, changing the default backup...

CVE-2023-4588 File accessibility vulnerability in Delinea Secret Server

File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the application's webroot directory, changing the default backup...

CVE-2023-4588

Delinea Secret Server (versions v10.9.000002 and v11.4.000002) contains a file accessibility vulnerability that could let an authenticated user with administrative privileges create a backup file in the webroot, redirect the default backup directory to wwwroot, and download files (e.g., encryptio...

CVE-2023-4588 File accessibility vulnerability in Delinea Secret Server

File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the application's webroot directory, changing the default backup...

CVE-2023-4588: Files or Directories Accessible to External Parties

File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the application's webroot directory, changing the default backup...

The vulnerability in the ColorPickerShownCallback function of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ColorPickerShownCallback function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

MMRat Android Trojan Executes Remote Financial Fraud Through Accessibility Feature

A previously undocumented Android banking trojan dubbed MMRat has been observed targeting mobile users in Southeast Asia since late June 2023 to remotely commandeer the devices and perform financial fraud. "The malware, named after its distinctive package name com.mm.user, can capture user input...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s V8 JavaScript engine lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Google Chrome browser’s CSS component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome browser’s CSS component is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...