5799 matches found
CVE-2021-31815
GAEN aka Google/Apple Exposure Notifications through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and sometimes COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to t...
CVE-2021-31815
GAEN aka Google/Apple Exposure Notifications through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and sometimes COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to t...
CVE-2021-31815
GAEN aka Google/Apple Exposure Notifications through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and sometimes COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to t...
Design/Logic Flaw
GAEN aka Google/Apple Exposure Notifications through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and sometimes COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to t...
CVE-2021-31815
GAEN aka Google/Apple Exposure Notifications through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and sometimes COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to t...
jquery-bbq 安全漏洞
jquery-bbq is an application. jQuery BBQ enables simple but powerful hash history via the cross-browser window.onhashchange event. A security vulnerability exists in jquery-bbq 1.2.1, which stems from an improperly controlled modification of the Object. prototype property that allows a malicious...
Mozilla Firefox Permission License and Access Control Issues Vulnerability (CNVD-2021-49133)
Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers using test code to enable session history manipulation...
Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4894-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4894-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a maliciou...
Parameter Injection Vulnerability in Multiple Mozilla Products
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security vulnerability exists in several Mozilla products, which can be...
Mozilla Thunderbird 注入漏洞
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security vulnerability exists in several Mozilla products, which can be...
Mozilla Firefox 权限许可和访问控制问题漏洞
Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers using test code to enable session history manipulation...
UBUNTU-CVE-2021-24001
A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations. This vulnerability affects Firefox 88...
April 13, 2021—KB5001387 (Monthly Rollup)
None None...
PT-2021-7365 · Apple +7 · Ios +11
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15 Apple iPadOS versions prior to 15 Apple tvOS versions prior to 15 Apple watchOS versions prior to 8 Description: The issue allows a remote attacker to access confidential data by visiting a maliciously crafted...
Business Directory Plugin < 5.11.2 - Arbitrary Payment History Update
The plugin suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status from pending to completed to example PoC Add a listing, don't complete payment status will be pending...
Jamf Pro Cross-Site Scripting Vulnerability
Jamf Pro is comprehensive enterprise management software for the Apple platform that simplifies IT management for Mac, iPad, iPhone and Apple TV. A cross-site scripting vulnerability exists in "Inventory History" in Jamf Pro versions prior to 10.28.0. No details of the vulnerability are available...
CVE-2021-30125
Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...
CVE-2021-30125
Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...