8214 matches found
CVE-2017-2651
jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in ra...
Identity theft protection firm LifeLock may have exposed user email addresses
By Waqas LifeLock, an Arizona-based identity theft protection firm may have exposed email addresses of millions of its customers - Simply put: A firm vowing to protect online identity of its customers may have exposed their identity to malicious hackers and cybercriminals. It happened due to a...
CVE-2018-14608
Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories...
CVE-2017-3217
CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS text message interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the...
Design/Logic Flaw
CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS text message interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the...
TP-Link WR840N Denial of Service Vulnerability
The TP-Link WR840N is a wireless router product from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link WR840N. A remote attacker can exploit this vulnerability to cause a denial of service loss of connection via a series of packets containing random MAC addresses...
CVE-2018-14336
TP-Link WR840N devices allow remote attackers to cause a denial of service connectivity loss via a series of packets with random MAC addresses...
Code injection
TP-Link WR840N devices allow remote attackers to cause a denial of service connectivity loss via a series of packets with random MAC addresses...
CVE-2018-14336
TP-Link WR840N devices allow remote attackers to cause a denial of service connectivity loss via a series of packets with random MAC addresses...
Lenovo Help Android app information disclosure vulnerability
Lenovo Help Android app is a Chinese Lenovo Lenovo application that provides online support for Lenovo products such as computers, cell phones and data centers. The app is mainly used to check device information and warranty status of Lenovo products, etc. A security vulnerability exists in the...
Information disclosure
The Fibre Channel over Ethernet FCoE feature in IBM System Networking and Blade Network Technology BNT switches running IBM Networking Operating System aka NOS, formerly BLADE Operating System floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow...
CVE-2018-9067
The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...
Improper access control
The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...
CVE-2018-9067
The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...
CVE-2018-9067
The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...
CVE-2018-9067
The Lenovo Help Android app (versions earlier than 6.1.2.0327) had insufficient access control for certain functions, which could lead to exposure of about 400 email addresses and 8,500 IMEI. Root cause: inadequate enforcement of access controls for specific features. Impact: data exposure; CVSS ...
CVE-2018-9067
The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI...
Threat Roundup for July 6-13
Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we've observed this week — covering the dates between July 6 and 13. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed ...
Notorious ‘Hijack Factory’ Shunned from Web
Score one for the good guys: Bitcanal, a Portuguese Web hosting firm long accused of helping spammers hijack large swaths of dormant Internet address space over the years, was summarily kicked off the Internet this week after a half-dozen of the company's bandwidth providers chose to sever ties...
