4258 matches found
The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of Oracle Marketing’s Marketing Administration component relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...
The vulnerability of the Kaspersky Security Center installation process for the Windows operating system arises from errors during the verification of dynamically loaded libraries. This vulnerability allows an attacker to compromise the integrity and accessibility of the protected information.
The vulnerability of the installation process of the Kaspersky Security Center antivirus protection software for the Windows operating system is related to errors during the verification of dynamically loaded libraries. Exploiting this vulnerability can allow an attacker to compromise the integri...
The vulnerability of the runc command, a tool for starting isolated containers, is related to the state of the race condition. Enabling link tracing allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the runc command, used to execute isolated containers, is related to the state of the race condition that allows for the tracking of references. Exploiting this vulnerability could enable a hacker to compromise the confidentiality, integrity, and accessibility of the protecte...
Service Update 1.41 for Microsoft Dynamics CRM (on-premises) 9.1
None None...
The vulnerability of embedded software developed by Qualcomm, related to the use of dangerous methods or functions, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of embedded Qualcomm software systems relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the DSP microprogramming software service in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Accessibility component in operating systems iOS and iPadOS, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Accessibility component in operating systems iOS and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of embedded software developed by Qualcomm, related to integer overflow, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of embedded Qualcomm software programs is related to integer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the software for creating and running NVIDIA Container Toolkit, related to insufficient spatial partitioning, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the software used for creating and running NVIDIA Container Toolkit is related to insufficient spatial partitioning. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
[SECURITY] Fedora 42 Update: qt5-qtspeech-5.15.18-1.fc42
The module enables a Qt application to support accessibility features such as text-to-speech, which is useful for end-users who are visually challenged or cannot access the application for whatever reason. The most common use case where text-to-speech comes in handy is when the end-user is drivin...
About the security content of iOS 18.7.2 and iPadOS 18.7.2
About the security content of iOS 18.7.2 and iPadOS 18.7.2 This document describes the security content of iOS 18.7.2 and iPadOS 18.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
“Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps
Researchers at Cyfirma have investigated Android Trojans capable of stealing sensitive data from compromised devices. The malware spreads by pretending to be trusted apps—like a news reader or even digital ID apps—tricking users into downloading it by accident. In reality, it’s Android-targeting...
CVE-2025-36091
CVE-2025-36091 affects IBM Cloud Pak for Business Automation Core components (25.0.0, 24.0.1, 24.0.0). Description and vendor advisories identify an ownership misassignment vulnerability (CWE-283: Unverified Ownership) that could allow an authenticated user to make dashboards inaccessible to legi...
About the security content of iOS 26.1 and iPadOS 26.1
About the security content of iOS 26.1 and iPadOS 26.1 This document describes the security content of iOS 26.1 and iPadOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
About the security content of iOS 26.1 and iPadOS 26.1
About the security content of iOS 26.1 and iPadOS 26.1 This document describes the security content of iOS 26.1 and iPadOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
[SECURITY] Fedora 42 Update: qt6-qtspeech-6.9.3-1.fc42
The module enables a Qt application to support accessibility features such as text-to-speech, which is useful for end-users who are visually challenged or cannot access the application for whatever reason. The most common use case where text-to-speech comes in handy is when the end-user is drivin...
Malicious code in vuejs-accessibility (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a06ba3db5dc9f82ea682ce485a98f9fe76e64ba482445a08306e872524603f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview vuejs-accessibility is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
