4302 matches found
CVE-2020-0263
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...
Information disclosure
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...
CVE-2020-0263
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...
CVE-2020-0263
CVE-2020-0263 affects Android 11, specifically the Accessibility service. A security issue causes a permission bypass via an unsafe PendingIntent, enabling local information disclosure without user interaction (local attacker privileges required). The Core impact is information disclosure with hi...
PT-2020-11617
Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permission bypass in the Accessibility service due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. Us...
CVE-2020-0263: Undefined Security Weakness
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...
Cisco IOS XR Data Compromise
The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...
Cisco IOS XR Data Compromise
The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
U.S. Dept Of Defense: Elmah.axd is publicly accessible and leaking Error Log for ROOT on █████_PRD_WEB1 █████████elmah.axd
Description: Hello, Security team, hope you are doing well. I found out that elmah.axd is publicly accessible on ████████ which is leaking error log which contain cookies and server code etc. Step-by-step Reproduction Instructions 1. Go to ██████elmah.axd and you will see the error logs. 2. Same...
libX11 Numerical Overflow DoS
The vulnerability of the client API library for the X Window System libX11 is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Description of the security update for SharePoint Server 2019: August 11, 2020
None None...
Infrastructure Component Data Compromise
The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploitation of this vulnerability could allow an attacker operating remotely to compromise the confidentiality,...
Oracle VM VirtualBox Core Component Data Compromise
The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
Oracle Solaris Device Driver Utility Data Compromise
The vulnerability of the Device Driver Utility component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Oracle SD-WAN Aware User Interface Component Data Compromise
The vulnerability of the User Interface component of the Oracle SD-WAN Aware centralized management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
openSUSE Security Update : MozillaFirefox (openSUSE-2020-1034)
This update for MozillaFirefox fixes the following issues : - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 - MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR - Fixed: Security fix - Fixed: Fixed an accessibility...
9 Tips to Keep Your Cloud Storage Safe and Secure
Make sure that your Dropbox, Google Drive, and Microsoft OneDrive data is protected—while still being easy for you to access...
OPENSUSE-SU-2020:1042-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR Fixed: Security fix Fixed: Fixed an accessibility regression in...
Security update for MozillaFirefox (moderate)
openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:1042-1 Rating: moderate References: 1173948 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the...
Troubleshooting Guest Processing Issues | "Test Now" or "Verify network connectivity and credentials"
Article Applicability This article's primary focus is on traditional credentials-based authentication. For environments using a Group Managed Service Account gMSA, please review the User Guide first to ensure you are familiar with all the Requirements and Limitations of gMSA usage. Challenge Skip...