Lucene search
+L

75 matches found

Openbugbounty
Openbugbounty
•added 2020/02/15 5:50 p.m.•14 views

mam-advogados.com.br Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting mam-advogados.com.br website and its users. Following...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/09/20 12:00 a.m.•28 views

Fedora 29 : dino (2019-0eb6d51f81)

Update dino to a96c8014, which addresses three CVEs. CVE-2019-16235 ============== Dino did not properly check the source of message carbons. https://nvd.nist.gov/vuln/detail/CVE-2019-16235 Fixed in https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc5 49c930 CVE-2019-16236...

7.5CVSS7.2AI score0.02385EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
•added 2019/09/17 12:00 a.m.•10 views

The vulnerability of the Intune MAM Policy implementation mechanism allows a perpetrator to circumvent existing security restrictions for internal corporate communication and Yammer for Android.

The vulnerability of the Intune MAM Policy implementation mechanism for corporate internal communication and Yammer for Android lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

7.8CVSS5.5AI score0.03366EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2019/09/11 10:15 p.m.•19 views

CVE-2019-1265

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy...

7.5CVSS7.3AI score0.03366EPSS
SaveExploits0References1
Prion
Prion
•added 2019/09/11 10:15 p.m.•28 views

Security feature bypass

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy...

5CVSS7.3AI score0.03366EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/09/11 9:24 p.m.•148 views

CVE-2019-1265

CVE-2019-1265 is a security feature bypass affecting the Microsoft Yammer Android app where Intune MAM Policy is not applied correctly. Affected component: Yammer App for Android. Root cause: improper application of Intune MAM Policy enabling functions restricted by policy. Impact: potential for ...

7.5CVSS7.4AI score0.03366EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2019/09/11 7:15 p.m.•23 views

CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

7.5CVSS6.6AI score
SaveExploits0References9
NVD
NVD
•added 2019/09/11 7:15 p.m.•21 views

CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

7.5CVSS7.5AI score0.01152EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2019/09/11 7:15 p.m.•24 views

CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

7.5CVSS7.1AI score0.01152EPSS
SaveExploits0References3
Prion
Prion
•added 2019/09/11 7:15 p.m.•21 views

Code injection

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

5CVSS7.4AI score0.01152EPSS
SaveExploits0References9Affected Software4
Debian CVE
Debian CVE
•added 2019/09/11 6:56 p.m.•54 views

CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

7.5CVSS7.5AI score0.01152EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/09/11 6:56 p.m.•43 views

CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala...

7.4AI score0.01152EPSS
SaveExploits0References9
CVE
CVE
•added 2019/09/11 6:56 p.m.•96 views

CVE-2019-16237

CVE-2019-16237 affects the Dino XMPP client prior to the 2019-09-10 release. The issue arises because Dino did not properly validate the source of MAM messages (module/xep/0313_message_archive_management.vala). This could allow an attacker to obtain, inject, or remove sensitive information. Fedor...

7.5CVSS7.3AI score0.01152EPSS
SaveExploits0References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/11 12:00 a.m.•4 views

CVE-2019-1265: Undefined Security Weakness

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy...

7.5CVSS7.4AI score0.03366EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2019/09/10 7:00 a.m.•42 views

Microsoft Yammer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy. This could allow an attacker to perform functions that are restricted by Intune Policy. The security update addresses the vulnerability by correcting the way the poli...

7.5CVSS2.6AI score0.03366EPSS
SaveExploits0
Prion
Prion
•added 2019/06/05 3:29 p.m.•25 views

Improper access control

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device...

6.4CVSS9.1AI score0.02594EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/06/05 2:53 p.m.•37 views

CVE-2018-18571

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device...

9.2AI score0.02594EPSS
SaveExploits0References2
CVE
CVE
•added 2019/06/05 2:53 p.m.•71 views

CVE-2018-18571

CVE-2018-18571 (Citrix XenMobile Server) is an Authentication Bypass vulnerability affecting XenMobile Server 10.9.0 before Rolling Patch 3 and 10.8.0 before Rolling Patch 6. An attacker could impersonate and act on behalf of any Mobile Application Management (MAM) enrolled device. The reported r...

9.1CVSS9.2AI score0.02594EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/05 12:00 a.m.•6 views

CVE-2018-18571: Improper Authentication

An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device...

9.1CVSS5.7AI score0.02594EPSS
SaveExploits0References2
Citrix
Citrix
•added 2019/04/26 4:00 a.m.•36 views

CVE-2018-18571 - Authentication Bypass vulnerability in XenMobile Server

Description of Problem A vulnerability has been identified in Citrix XenMobile Server that could permit an attacker to impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device. The vulnerability has been assigned the following CVE number: • CVE-2018-18571:...

9.1CVSS8.9AI score0.02594EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder