859 matches found
Hcl Technologies Hcl Traveler Companion 加密问题漏洞
Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. Hcl Technologies HCL Traveler Companion suffers from an encryption issue vulnerability that stems from an iOS weak encryption...
CVE-2020-14263
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14263
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
Design/Logic Flaw
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14263
CVE-2020-14263 affects HCL Traveler Companion (iOS) via the MobileIron AppConnect SDK. The underlying issue is described as an iOS weak cryptographic process vulnerability, with the CVSS terms indicating HIGH impact to confidentiality (C: HIGH) but no impact on integrity or availability, and with...
CVE-2020-14263
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
Hcl Technologies Hcl Traveler Companion 加密问题漏洞
Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. HCL Traveler Companion suffers from an encryption issue vulnerability that stems from the software's susceptibility to an iOS...
IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft
Three vulnerabilities in the IP video-surveillance systems created by Axis Communications could allow arbitrary code execution, among other attacks. That’s according to Nozomi Networks Labs, whose researchers examined the company’s Axis Companion Recorder, a compact network video recorder NVR tha...
Companion Heart App in Denial of Service Vulnerability
Companion Heart App is an online voice and video socialization application, with voice chat rooms, game competition and other online and offline sharing skills themed interactions, mutual invitations, and socialization based on interests. Companion Heart App is vulnerable to a denial of service...
Wuhan Douyu Fish Music Network Technology Co., Ltd Douyu Live Companion suffers from dll hijacking vulnerability (CNVD-2021-21511)
Douyu Live Companion is a live streaming software specially developed for the anchors of Douyu. Wuhan Douyu Fish Music Network Technology Co. Douyu Live Companion has a dll hijacking vulnerability, which can be exploited by attackers to execute malicious code and obtain server privileges...
CVE-2021-0319
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC addresses, with Use...
Racer Live Companion suffers from dll hijacking vulnerability
Racer Live Companion is the latest launch of the live broadcast software developed by Beijing Racer Technology Co., Ltd. users with live access can use the Racer Live Companion for live broadcasts, anchors can play games while live. Racer live partner dll hijacking vulnerability, attackers can us...
December 1, 2020, update for Office 2016 (KB4486716)
None None...
December 1, 2020, update for Office 2016 (KB4486747)
None None...
GHSA-MM7R-265W-JV6F Server-Side Request Forgery in @uppy/companion
Versions of @uppy/companion prior to 1.9.3 are vulnerable to Server-Side Request Forgery SSRF. The get route passes the user-controlled variable req.body.url to a GET request without sanitizing the value. This allows attackers to inject arbitrary URLs and make GET requests on behalf of the server...
Server-Side Request Forgery in @uppy/companion
Versions of @uppy/companion prior to 1.9.3 are vulnerable to Server-Side Request Forgery SSRF. The get route passes the user-controlled variable req.body.url to a GET request without sanitizing the value. This allows attackers to inject arbitrary URLs and make GET requests on behalf of the server...
Server-Side Request Forgery in @uppy/companion
The @uppy/companion npm package before versions 1.13.2 and 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems...
Atlassian Companion Installed (Windows)
Binary data atlassiancompanionwininstalled.nbin...
Atlassian Companion < 1.0.0 Protection Mechanism Failure
The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. C Tenable Network Security, Inc...
Unspecified vulnerability in Atlassian Companion app
The Atlassian Companion app is an application from Atlassian Australia that enables users to edit Confluence files in their preferred desktop application. A security vulnerability exists in the file download feature in versions of the Atlassian Companion app prior to 1.0.0, which stems from a...