SAMSUNG Mobile devices 信息泄露漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices Game Launcher prior to version 6.0.07, which stems from a sensitive information vulnerability that ca...

Malicious code in fxa-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ed0ac9d7db600b89a3182d2eb21eaa58280411b41ac01a569dab47f4963351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3256 Malicious code in fxa-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ed0ac9d7db600b89a3182d2eb21eaa58280411b41ac01a569dab47f4963351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launcher-start-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26fefa43c2e6dbcc8f19f621f71b06602f1dee3deb4bfa27a4eaad60561d4dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4262 Malicious code in launcher-start-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26fefa43c2e6dbcc8f19f621f71b06602f1dee3deb4bfa27a4eaad60561d4dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

3a-server (>=0.7.41 <=0.9.10), 3a-server-mongo (>=0.1.0-beta.1 <=1.0.0-beta.1) +457 more potentially affected by CVE-2020-7645 via chrome-launcher (>=0.10.0 <=0.13.1)

chrome-launcher NPM version =0.10.0, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.0.3, =5.0.0, =5.0.0, =5.0.0, =0.0.1, =0.1.0, =1.0.2, =2.0.1-pr.52, =0.0.1-alpha.1, =0.1.0, =0.0.1, =2.6.0, =5.0.0 and more Source cves: CVE-2020-7645 Source advisory: OSV:GHSA-GP2J-MG4W-2RH5...

chrome-launcher subject to OS Command Injection

chrome-launcher prior to 0.13.2 is subject to OS Command Injection via the $HOME environment variable in Linux operating systems. This issue is patched in version 0.13.2...

GHSA-GP2J-MG4W-2RH5 chrome-launcher subject to OS Command Injection

chrome-launcher prior to 0.13.2 is subject to OS Command Injection via the $HOME environment variable in Linux operating systems. This issue is patched in version 0.13.2...

com.processpuzzle:processpuzzle-commons-domain (>=0.1.0-RELEASE <=0.1.1-RELEASE), com.processpuzzle:processpuzzle-litest-domain (>=0.3.1-RELEASE <=0.3.2-RELEASE) +1 more potentially affected by CVE-2014-1216 via org.fitnesse:fitnesse (>=20131110 <=20140201)

org.fitnesse:fitnesse MAVEN version =20131110, =0.1.0-RELEASE, =0.3.1-RELEASE, =1.4.1, =1.4.2 Source cves: CVE-2014-1216 Source advisory: OSV:GHSA-MPX3-MX2P-9GV3...

com.mozu:mozu-api-jobs (>=1.0.13 <=1.0.23), gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1 <=0.0.8) +25 more potentially affected by CVE-2018-1229 via org.springframework.batch:spring-batch-admin-manager (>=1.3.0.RELEASE <=1.3.1.RELEASE)

org.springframework.batch:spring-batch-admin-manager MAVEN version =1.3.0.RELEASE, =1.0.13, =0.0.1, =1.3.1.RELEASE, =1.6.0.RELEASE, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.0.0.RELEASE, =1.1.0.RELEASE, =1.7.3.RELEASE -...

CVE-2021-39797

In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

(0Day) Epic Games Launcher Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

(0Day) Epic Games Launcher Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

SUSE SLES15 Security Update : kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container (SUSE-SU-2022:0526-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:0526-1 advisory. - The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server. CVE-2021-43565 No...

openSUSE 15 Security Update : kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container (openSUSE-SU-2022:0526-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0526-1 advisory. - The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server. CVE-2021-43565...

Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container (moderate)

openSUSE Security Update: Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container Announcement ID: openSUSE-SU-2022:0526-1 Rating: moderate References: Cross-References:...

The vulnerability of the Windows System Launcher component of the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows System Launcher component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

[SECURITY] Fedora 34 Update: rust-python-launcher-1.0.0-4.fc34

The Python Launcher for Unix. Launch your Python interpreter the lazy/smart way! This launcher is an implementation of the py command for Unix-based platforms. The goal is to have py become the cross-platform command that Python users typically use to launch an interpreter while doing development...

Fedora: Security Advisory for rust-python-launcher (FEDORA-2022-7ec8bda833)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-21817

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing CORS vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code...