Lucene search
+L

4302 matches found

osv_cve
osv_cve
•added 2020/09/18 4:15 p.m.•23 views

CVE-2020-0263

In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...

5.5CVSS6.2AI score0.00133EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/18 4:15 p.m.•25 views

Information disclosure

In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...

2.1CVSS5.8AI score0.00133EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/18 3:06 p.m.•39 views

CVE-2020-0263

In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...

6.1AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/18 3:06 p.m.•79 views

CVE-2020-0263

CVE-2020-0263 affects Android 11, specifically the Accessibility service. A security issue causes a permission bypass via an unsafe PendingIntent, enabling local information disclosure without user interaction (local attacker privileges required). The Core impact is information disclosure with hi...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/18 12:00 a.m.•7 views

PT-2020-11617

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible permission bypass in the Accessibility service due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. Us...

5.5CVSS0.00133EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•10 views

CVE-2020-0263: Undefined Security Weakness

In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130...

5.5CVSS5.9AI score0.00133EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/09/11 12:00 a.m.•15 views

Cisco IOS XR Data Compromise

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

8.4CVSS7.2AI score0.00281EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/09/11 12:00 a.m.•18 views

Cisco IOS XR Data Compromise

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.00384EPSS
SaveExploits0References2Affected Software1
Hacker One
Hacker One
•added 2020/08/19 7:58 p.m.•318 views

U.S. Dept Of Defense: Elmah.axd is publicly accessible and leaking Error Log for ROOT on █████_PRD_WEB1 █████████elmah.axd

Description: Hello, Security team, hope you are doing well. I found out that elmah.axd is publicly accessible on ████████ which is leaking error log which contain cookies and server code etc. Step-by-step Reproduction Instructions 1. Go to ██████elmah.axd and you will see the error logs. 2. Same...

0.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/08/14 12:00 a.m.•12 views

libX11 Numerical Overflow DoS

The vulnerability of the client API library for the X Window System libX11 is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

5.9CVSS7.6AI score0.00465EPSS
SaveExploits0References13Affected Software6
Microsoft KB
Microsoft KB
•added 2020/08/11 7:00 a.m.•72 views

Description of the security update for SharePoint Server 2019: August 11, 2020

None None...

8.8CVSS6.5AI score0.04906EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/08/05 12:00 a.m.•13 views

Infrastructure Component Data Compromise

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploitation of this vulnerability could allow an attacker operating remotely to compromise the confidentiality,...

6.5CVSS6.9AI score0.00882EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/08/05 12:00 a.m.•20 views

Oracle VM VirtualBox Core Component Data Compromise

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.5CVSS7.3AI score0.00552EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/29 12:00 a.m.•16 views

Oracle Solaris Device Driver Utility Data Compromise

The vulnerability of the Device Driver Utility component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.3CVSS6.6AI score0.0046EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/29 12:00 a.m.•17 views

Oracle SD-WAN Aware User Interface Component Data Compromise

The vulnerability of the User Interface component of the Oracle SD-WAN Aware centralized management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

10CVSS7.8AI score0.02087EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/07/27 12:00 a.m.•16 views

openSUSE Security Update : MozillaFirefox (openSUSE-2020-1034)

This update for MozillaFirefox fixes the following issues : - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 - MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR - Fixed: Security fix - Fixed: Fixed an accessibility...

5.5AI score
SaveExploits0References1
Wired Threat Level
Wired Threat Level
•added 2020/07/26 11:00 a.m.•33 views

9 Tips to Keep Your Cloud Storage Safe and Secure

Make sure that your Dropbox, Google Drive, and Microsoft OneDrive data is protected—while still being easy for you to access...

2AI score
SaveExploits0
osv_opensuse
osv_opensuse
•added 2020/07/23 4:23 a.m.•5 views

OPENSUSE-SU-2020:1042-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR Fixed: Security fix Fixed: Fixed an accessibility regression in...

7.1AI score
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2020/07/23 12:00 a.m.•111 views

Security update for MozillaFirefox (moderate)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:1042-1 Rating: moderate References: 1173948 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the...

7.4AI score
SaveExploits0
Veeam
Veeam
•added 2020/07/23 12:00 a.m.•114 views

Troubleshooting Guest Processing Issues | "Test Now" or "Verify network connectivity and credentials"

Article Applicability This article's primary focus is on traditional credentials-based authentication. For environments using a Group Managed Service Account gMSA, please review the User Guide first to ensure you are familiar with all the Requirements and Limitations of gMSA usage. Challenge Skip...

6AI score
SaveExploits0Affected Software2
Rows per page
Query Builder