CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

Design/Logic Flaw

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

According to connected documents, CVE-2021-40180 affects WeChat app version 8.0.10 for Android and iOS, where a mini program can invoke wx.searchContacts to access the user's address book and obtain sensitive information. The root cause is a permissions/API misuse in the mini program environment ...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

Tencent WeChat 信息泄露漏洞

Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text, among others. A security vulnerability exists in Tencent WeChat version 8.0.10, which stems from an applet that can obtain sensitiv...

Multiple vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-839CyVDB-2300CyVDB-3109 Browse restriction bypass vulnerability in Cabinet CWE-284 - CVE-2022-32283 CyVDB-1795 Operation restriction bypass vulnerability in Project CWE-285 - CVE-2022-32544...

Cybozu Office 安全漏洞

Cybozu Office is a Web-based, cross-platform collaborative office solution from Cybozu. A security vulnerability exists in Cybozu Office that stems from improper access restrictions in the address book, which can be exploited by remote attackers to bypass the security restrictions and gain access...

GHSA-W3MQ-67MW-3P9F Magento Cross-Site Request Forgery (CSRF)

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433...

The vulnerability of the Windows Address Book on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Address Book on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability...

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability...

CVE-2022-26926

Windows Address Book Remote Code Execution Vulnerability...

Remote code execution

Windows Address Book Remote Code Execution Vulnerability...

CVE-2022-26926

Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.

CVE-2022-26926 Windows Address Book Remote Code Execution Vulnerability

...

Windows Address Book Remote Code Execution Vulnerability

...

PT-2022-2459

Name of the Vulnerable Software and Affected Versions Windows Address Book affected versions not specified Description The issue exists due to insufficient input validation in the Windows Address Book, allowing remote attackers to execute arbitrary code and affect the system. Recommendations At t...

Microsoft Windows Address Book 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Address Book. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 1...

Kyocera Printer Information Disclosure Vulnerability (Mar 2022) - Active Check

Kyocera printers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1026

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function...