Lucene search
+L

859 matches found

CNNVD
CNNVD
added 2021/10/25 12:0 a.m.4 views

Hcl Technologies Hcl Traveler Companion 加密问题漏洞

Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. Hcl Technologies HCL Traveler Companion suffers from an encryption issue vulnerability that stems from an iOS weak encryption...

3.9CVSS5.1AI score0.00157EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/21 5:15 p.m.20 views

CVE-2020-14263

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

3.9CVSS0.00226EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/21 5:15 p.m.6 views

CVE-2020-14263

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

3.9CVSS5.8AI score0.00226EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/21 5:15 p.m.20 views

Design/Logic Flaw

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

2.1CVSS4.2AI score0.00226EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/21 4:34 p.m.49 views

CVE-2020-14263

CVE-2020-14263 affects HCL Traveler Companion (iOS) via the MobileIron AppConnect SDK. The underlying issue is described as an iOS weak cryptographic process vulnerability, with the CVSS terms indicating HIGH impact to confidentiality (C: HIGH) but no impact on integrity or availability, and with...

3.9CVSS4.2AI score0.00226EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/21 4:34 p.m.34 views

CVE-2020-14263

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

4.1AI score0.00226EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/21 12:0 a.m.6 views

Hcl Technologies Hcl Traveler Companion 加密问题漏洞

Hcl Technologies Hcl Traveler Companion is an ios Iphone and Ipad application from Hcl Technologies India. It is used to read encrypted Hcl Notes emails on Apple devices. HCL Traveler Companion suffers from an encryption issue vulnerability that stems from the software's susceptibility to an iOS...

3.9CVSS5.1AI score0.00226EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2021/10/05 9:9 p.m.62 views

IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft

Three vulnerabilities in the IP video-surveillance systems created by Axis Communications could allow arbitrary code execution, among other attacks. That’s according to Nozomi Networks Labs, whose researchers examined the company’s Axis Companion Recorder, a compact network video recorder NVR tha...

8.8CVSS8.7AI score0.00923EPSS
SaveExploits0References6
CNVD
CNVD
added 2021/03/19 12:0 a.m.2 views

Companion Heart App in Denial of Service Vulnerability

Companion Heart App is an online voice and video socialization application, with voice chat rooms, game competition and other online and offline sharing skills themed interactions, mutual invitations, and socialization based on interests. Companion Heart App is vulnerable to a denial of service...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/03/05 12:0 a.m.4 views

Wuhan Douyu Fish Music Network Technology Co., Ltd Douyu Live Companion suffers from dll hijacking vulnerability (CNVD-2021-21511)

Douyu Live Companion is a live streaming software specially developed for the anchors of Douyu. Wuhan Douyu Fish Music Network Technology Co. Douyu Live Companion has a dll hijacking vulnerability, which can be exploited by attackers to execute malicious code and obtain server privileges...

7.6AI score
SaveExploits0
OSV
OSV
added 2021/01/11 10:15 p.m.5 views

CVE-2021-0319

In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC addresses, with Use...

7.3CVSS6.7AI score0.00256EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/07 12:0 a.m.6 views

Racer Live Companion suffers from dll hijacking vulnerability

Racer Live Companion is the latest launch of the live broadcast software developed by Beijing Racer Technology Co., Ltd. users with live access can use the Racer Live Companion for live broadcasts, anchors can play games while live. Racer live partner dll hijacking vulnerability, attackers can us...

7.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/12/01 12:0 a.m.7 views

December 1, 2020, update for Office 2016 (KB4486716)

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/12/01 12:0 a.m.4 views

December 1, 2020, update for Office 2016 (KB4486747)

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2020/09/03 3:51 p.m.41 views

GHSA-MM7R-265W-JV6F Server-Side Request Forgery in @uppy/companion

Versions of @uppy/companion prior to 1.9.3 are vulnerable to Server-Side Request Forgery SSRF. The get route passes the user-controlled variable req.body.url to a GET request without sanitizing the value. This allows attackers to inject arbitrary URLs and make GET requests on behalf of the server...

9.8CVSS9.4AI score0.01328EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2020/09/03 3:51 p.m.35 views

Server-Side Request Forgery in @uppy/companion

Versions of @uppy/companion prior to 1.9.3 are vulnerable to Server-Side Request Forgery SSRF. The get route passes the user-controlled variable req.body.url to a GET request without sanitizing the value. This allows attackers to inject arbitrary URLs and make GET requests on behalf of the server...

9.8CVSS5.6AI score0.01328EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2020/08/13 6:54 p.m.57 views

Server-Side Request Forgery in @uppy/companion

The @uppy/companion npm package before versions 1.13.2 and 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems...

7.5CVSS5.1AI score0.0119EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/06/05 12:0 a.m.11 views

Atlassian Companion Installed (Windows)

Binary data atlassiancompanionwininstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/05 12:0 a.m.32 views

Atlassian Companion < 1.0.0 Protection Mechanism Failure

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. C Tenable Network Security, Inc...

7.2CVSS7.4AI score0.01669EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/06/02 12:0 a.m.3 views

Unspecified vulnerability in Atlassian Companion app

The Atlassian Companion app is an application from Atlassian Australia that enables users to edit Confluence files in their preferred desktop application. A security vulnerability exists in the file download feature in versions of the Atlassian Companion app prior to 1.0.0, which stems from a...

7.2CVSS7.3AI score0.01669EPSS
SaveExploits0References1
Rows per page
Query Builder