EUVD-2021-18809

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...

CVE-2021-31936 Microsoft Accessibility Insights for Web Information Disclosure Vulnerability

...

Experts warn of a new Android banking trojan stealing users' credentials

Cybersecurity researchers on Monday disclosed a new Android trojan that hijacks users' credentials and SMS messages to facilitate fraudulent activities against banks in Spain, Germany, Italy, Belgium, and the Netherlands. Called "TeaBot" or Anatsa, the malware is said to be in its early stages of...

Description of the security update for SharePoint Server 2019: May 11, 2021 (KB5001916)

None None...

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability

...

Microsoft Accessibility Insights for Web 信息泄露漏洞

Microsoft Accessibility Insights for Web is an application from Microsoft Corporation USA. It is used to help developers find and fix accessibility issues in web applications and websites. An information disclosure vulnerability exists in Microsoft Accessibility Insights for Web. The following...

CVE-2021-31936: Undefined Security Weakness

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...

KLA12172 OSI vulnerability in Microsoft Azure

An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-31936 Exploitation Related products Microsoft-Access CVE list CVE-2021-31936 high KB list Solution Install necessary...

May 11, 2021-KB5001842 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

OPENSUSE-SU-2021:0691-1 Security update for vlc

This update for vlc fixes the following issues: Update to version 3.0.13: + Demux: - Adaptive: fix artefacts in HLS streams with wrong profiles/levels - Fix regression on some MP4 files for the audio track - Fix MPGA and ADTS probing in TS files - Fix Flac inside AVI files - Fix VP9/Webm artefact...

Raft of Exim Security Holes Allow Linux Mail Server Takeovers

A veritable cornucopia of security vulnerabilities in the Exim mail server have been uncovered, some of which could be chained together for unauthenticated remote code execution RCE, gaining root privileges and worm-style lateral movement, according to researchers. The Qualys Research Team has...

Cisco Adaptive Security Appliance Buffer Overflow

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to compromise the...

SonicWall Email Security Privilege Management

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Scripps Cyberattack Causes Widespread Hospital Outages

Scripps Health, a hospital network based in San Diego, was hit by a cyberattack over the weekend, forcing some critical-care patients to be diverted, according to the San Diego Union-Tribune. Scripps acknowledged the attack in a statement but didn’t specify whether it was a ransomware incident...

Attention! FluBot Android Banking Malware Spreads Quickly Across Europe

Attention, Android users! A banking malware capable of stealing sensitive information is "spreading rapidly" across Europe, with the U.S. likely to be the next target. According to a new analysis by Proofpoint, the threat actors behind FluBot aka Cabassous have branched out beyond Spain to target...

Google Chrome Web Page Display Mechanism Data Compromise

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

LibreOffice Data Compromise

The vulnerability of the LibreOffice office software package is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

About the security content of iOS 14.5 and iPadOS 14.5

About the security content of iOS 14.5 and iPadOS 14.5 This document describes the security content of iOS 14.5 and iPadOS 14.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2021-13635

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 Security Update versions prior to 2021-002 Catalina Security Update versions prior to 2021-003 Mojave Description: A malicious application may be able to unexpectedly leak a user's credentials from secure text...

CDATA Optical Line Terminals Rigid Encoding

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...