Lucene search
+L

7495 matches found

osv_cve
osv_cve
•added 2021/02/11 6:15 p.m.•20 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS6.4AI score
SaveExploits0References3
NVD
NVD
•added 2021/02/11 6:15 p.m.•28 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS0.0102EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2021/02/11 6:15 p.m.•48 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS3.2AI score0.0102EPSS
SaveExploits0
Prion
Prion
•added 2021/02/11 6:15 p.m.•31 views

Design/Logic Flaw

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS4.3AI score0.0102EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/02/11 6:15 p.m.•14 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS5.9AI score0.0102EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2021/02/11 6:05 p.m.•257 views

CVE-2021-21301

Wire for iOS prior to 3.75 contains a privacy vulnerability where video capture isn’t stopped when a user first enables the camera and then disables it, causing video to be streamed in calls and potentially exposed. All users in video calls are affected. The issue is fixed in version 3.75. Remedi...

4.3CVSS4AI score0.0102EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2021/02/11 6:05 p.m.•8 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS0.0102EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•10 views

CVE-2021-21301: Exposure of Sensitive Information to an Unauthorized Actor

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS5.8AI score0.0102EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/02/10 9:15 p.m.•21 views

CVE-2020-8355

An internal product security audit of Lenovo XClarity Administrator LXCA prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture FFDC service log if the service log is...

4.9CVSS5.8AI score0.00529EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/02/10 9:05 p.m.•56 views

CVE-2020-8355

An internal product security audit of Lenovo XClarity Administrator LXCA prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture FFDC service log if the service log is...

4.9CVSS5.2AI score0.00529EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/10 8:44 p.m.•12 views

CVE-2020-8355

An internal product security audit of Lenovo XClarity Administrator LXCA prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture FFDC service log if the service log is...

4.9CVSS5.3AI score0.00529EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/02/09 2:50 p.m.•45 views

CVE-2020-4996

IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913...

6.5CVSS5.2AI score0.00368EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•26 views

Lenovo Lenovo XClarity Administrator Information Disclosure Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product provides agentless hardware management for servers, storage, network switches, and more. An information disclosure vulnerability exists in Lenovo XClarity Administrator, which stems fr...

4.9CVSS5.8AI score0.00529EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•2 views

PT-2021-12274

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue allows a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. Recommendations For IBM Security Identity...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•10 views

CVE-2020-4996: Undefined Security Weakness

IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/02/08 11:15 p.m.•22 views

CVE-2021-26917

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported awa...

5.5CVSS6.5AI score
SaveExploits0References4
NVD
NVD
•added 2021/02/08 11:15 p.m.•79 views

CVE-2021-26917

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported awa...

5.5CVSS0.0055EPSS
SaveExploits1References4
The Hacker News
The Hacker News
•added 2021/02/08 11:23 a.m.•21 views

Detailed: Here's How Iran Spies on Dissidents with the Help of Hackers

Twin cyber operations conducted by state-sponsored Iranian threat actors demonstrate their continued focus on compiling detailed dossiers on Iranian citizens that could threaten the stability of the Islamic Republic, including dissidents, opposition forces, and ISIS supporters, and Kurdish native...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/02/08 12:00 a.m.•38 views

Fedora 33 : 1:wireshark (2021-f3011da665)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f3011da665 advisory. - Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture fil...

5.3CVSS6.1AI score0.03001EPSS
SaveExploits4References5
attackerkb
attackerkb
•added 2021/02/08 12:00 a.m.•10 views

CVE-2020-4996

IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913...

6.5CVSS6AI score0.00368EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder