Lucene search
+L

1942 matches found

Positive Technologies
Positive Technologies
•added 2022/10/13 12:00 a.m.•3 views

PT-2022-25267

Name of the Vulnerable Software and Affected Versions Foresight GC3 Launch Monitor version 1.3.15.68 Description The issue allows for process debugging, file system modification, and terminal access as the root user through a Target Communication Framework TCF service. This service listens on a T...

8CVSS5.7AI score0.00855EPSS
SaveExploits1References7
Packet Storm
Packet Storm
•added 2022/10/03 12:00 a.m.•252 views

Google Chrome 103.0.5060.53 Autofill Assistant Universal Cross Site Scripting

Chrome: Universal XSS in Autofill Assistant VULNERABILITY DETAILS From the Autofill Assistant README file1: Autofill Assistant is an execution engine to run user journeys on websites given a set of actions. These actions include clicking on buttons or scrolling to an element. They also provide a...

SaveExploits0
CNNVD
CNNVD
•added 2022/09/20 12:00 a.m.•18 views

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla Thunderbird that stems from an...

7.8CVSS7.2AI score0.00223EPSS
SaveExploits0References7
Snyk
Snyk
•added 2022/09/08 11:24 a.m.•4 views

Malicious Package

Overview acala-launch is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
CNVD
CNVD
•added 2022/09/07 12:00 a.m.•91 views

Huawei HarmonyOS iAware module malicious application control vulnerability

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based, fully distributed operating system. The Huawei HarmonyOS iAware module is vulnerable to a malicious application control vulnerability that could be exploited to cause malicious applications to boot and...

9.8CVSS2.6AI score0.00639EPSS
SaveExploits0References1
osv_opensuse
osv_opensuse
•added 2022/08/24 2:33 a.m.•17 views

OPENSUSE-SU-2022:10095-1 Security update for nim

This update for nim fixes the following issues: Includes upstream security fixes for: boo1175333, CVE-2020-15693 httpClient is vulnerable to a CR-LF injection boo1175334, CVE-2020-15692 mishandle of argument to browsers.openDefaultBrowser boo1175332, CVE-2020-15694 httpClient.get.contentLength...

10CVSS8.1AI score0.04205EPSS
SaveExploits7References19
Citrix
Citrix
•added 2022/08/17 12:00 a.m.•36 views

Auto Redirection to Desktop/App list via Gateway stucked in "Detect Citrix Workspace app" page

To auto launch desktop, you should ensure Citrix Webhelper work as invoked mode to accessdesktop/app via Citrix Gateway, please refer toCTX221662 for more details. This need user to encounter "Detect Citrix Workspace app" page to check local installed Citrix Workspace app. If you do not see this...

6.7AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•17 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android 13, which stems from a logic error in the code in Connectivity that could bypass the restriction of launching activities from the background, whic...

7.8CVSS7.7AI score0.00111EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•14 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a lack of permission checking in Core, which could potentially allow an activity to be launched from the background, which...

7.8CVSS7.3AI score0.001EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/08/05 4:15 p.m.•17 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS5.8AI score0.0009EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/05 4:15 p.m.•14 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS5.8AI score0.0009EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/05 4:15 p.m.•23 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS0.0009EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/05 4:15 p.m.•33 views

Design/Logic Flaw

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

1.7CVSS4.2AI score0.0009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/08/05 3:20 p.m.•43 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS4.3AI score0.0009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/08/05 12:00 a.m.•5 views

PT-2022-21843

Name of the Vulnerable Software and Affected Versions Samsung Galaxy Friends versions prior to SMR Aug-2022 Release 1 Description The issue concerns an unprotected dynamic receiver, allowing an attacker to launch an activity. Recommendations For versions prior to SMR Aug-2022 Release 1, update to...

3.3CVSS0.0009EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•11 views

CVE-2022-33726: Dead Code

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS5.5AI score0.0009EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/08/04 12:00 a.m.•82 views

IBM CICS TX Advanced Clickjacking Vulnerability

IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 is vulnerable to a clickjacking vulnerability that stems from the program's failure to adequately...

6.1CVSS4AI score0.00863EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/08/03 8:15 p.m.•18 views

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

6.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/03 8:15 p.m.•32 views

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

6.5CVSS0.00528EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/03 8:15 p.m.•26 views

Input validation

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

4CVSS6.1AI score0.00528EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder