Lucene search
+L

431 matches found

CNVD
CNVD
•added 2021/04/12 12:00 a.m.•71 views

Facebook WhatsApp and WhatsApp Business have unspecified vulnerabilities

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, etc. WhatsApp Business is the commercia...

7.5CVSS7.3AI score0.03805EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/06 5:15 p.m.•12 views

CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5CVSS7.3AI score0.03805EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/04/06 5:15 p.m.•10 views

CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5CVSS7.3AI score0.03805EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/04/06 4:45 p.m.•264 views

CVE-2021-24027

CVE-2021-24027 is a vulnerability affecting WhatsApp for Android and WhatsApp Business for Android prior to/including v2.21.4.18, causing a cache configuration issue that could allow a third party with access to external storage to read cached TLS material. The issue is described as a sensitive i...

7.5CVSS7.4AI score0.03805EPSS
SaveExploits1References1Affected Software2
CNNVD
CNNVD
•added 2021/04/06 12:00 a.m.•16 views

Facebook WhatsApp 安全漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, etc. WhatsApp Business is the commercia...

7.5CVSS7.3AI score0.03805EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/06 12:00 a.m.•2 views

CVE-2021-24027: Use of Cache Containing Sensitive Information

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material...

7.5CVSS7.3AI score0.03805EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/06 12:00 a.m.•14 views

PT-2021-15651 · Facebook · Whatsapp Business For Android +1

Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.4.18 WhatsApp Business for Android versions prior to 2.21.4.18 Description: A cache configuration issue may have allowed a third party with access to the device’s external storage to read cached TLS...

7.5CVSS7.3AI score0.03805EPSS
SaveExploits1References18
CNVD
CNVD
•added 2021/03/10 12:00 a.m.•65 views

Unspecified Vulnerability in Nextcloud

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in versions of Nextcloud Server prior to 20.0.0 that stems from a recoverable format storage password, even if external storag...

6.7CVSS6.6AI score0.00512EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2021/03/08 12:00 a.m.•60 views

Nextcloud Server Multiple Vulnerabilities (NC-SA-2021-004, NC-SA-2021-005)

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

6.5CVSS6AI score0.01686EPSS
SaveExploits2References2
OSV
OSV
•added 2021/03/03 6:15 p.m.•23 views

CVE-2021-22877

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet...

6.5CVSS6.7AI score
SaveExploits0References5
NVD
NVD
•added 2021/03/03 6:15 p.m.•35 views

CVE-2021-22877

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet...

6.5CVSS0.01686EPSS
SaveExploits1References5
OSV
OSV
•added 2021/03/03 6:15 p.m.•26 views

CVE-2020-8296

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...

6.7CVSS6.6AI score
SaveExploits0References5
NVD
NVD
•added 2021/03/03 6:15 p.m.•28 views

CVE-2020-8296

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...

6.7CVSS0.00512EPSS
SaveExploits1References5
Prion
Prion
•added 2021/03/03 6:15 p.m.•26 views

Code injection

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet...

5.5CVSS7AI score0.01686EPSS
SaveExploits1References5Affected Software2
Prion
Prion
•added 2021/03/03 6:15 p.m.•23 views

Format string

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...

4.6CVSS7AI score0.00512EPSS
SaveExploits1References5Affected Software2
attackerkb
attackerkb
•added 2021/03/03 6:15 p.m.•11 views

CVE-2021-22877

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet...

6.5CVSS6.6AI score0.01686EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2021/03/03 6:15 p.m.•9 views

CVE-2020-8296

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...

6.7CVSS6.5AI score0.00512EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2021/03/03 5:40 p.m.•49 views

CVE-2020-8296

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...

7.5AI score0.00512EPSS
SaveExploits1References5
CVE
CVE
•added 2021/03/03 5:39 p.m.•97 views

CVE-2021-22877

CVE-2021-22877 affects Nextcloud Server prior to 20.0.6, where a missing user check can cause a user’s own credentials to be populated for other users’ external storage configuration when that configuration has not yet been set. This is documented across multiple sources (NVD entry, CNVD/CNNVD su...

6.5CVSS6.5AI score0.01686EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2021/03/03 5:39 p.m.•50 views

CVE-2021-22877

A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet...

7.3AI score0.01686EPSS
SaveExploits1References5
Rows per page
Query Builder