Lucene search
+L

2410 matches found

CVE
CVE
added 2020/05/20 1:40 p.m.69 views

CVE-2020-5753

CVE-2020-5753 affects Signal Private Messenger for Android (v4.59.0 and up) and iOS (v3.8.1.5 and up). The vulnerability arises from ICE Candidate handling before a call is answered or declined, allowing a remote non‑contact to ring the victim’s device and disclose the DNS server currently in use...

5.3CVSS5AI score0.01075EPSS
SaveExploits0References1Affected Software2
ThreatPost
ThreatPost
added 2020/05/19 5:00 p.m.68 views

WolfRAT Android Malware Targets WhatsApp, Facebook Messenger

UPDATE A new Android malware family has been discovered, which targets popular messaging apps like WhatsApp and Facebook Messenger to gather intelligence on Android victims. The malware, dubbed WolfRAT, is under active development, and was recently identified in campaigns targeting Thai users...

7.3AI score
SaveExploits0References8
Schneier on Security
Schneier on Security
added 2020/04/29 5:29 p.m.27 views

How Did Facebook Beat a Federal Wiretap Demand?

This is interesting: Facebook Inc. in 2018 beat back federal prosecutors seeking to wiretap its encrypted Messenger app. Now the American Civil Liberties Union is seeking to find out how. The entire proceeding was confidential, with only the result leaking to the press. Lawyers for the ACLU and t...

7.2AI score
SaveExploits0
GoogleProjectZero
GoogleProjectZero
added 2020/04/28 12:00 a.m.131 views

Fuzzing ImageIO

Posted by Samuel Groß, Project Zero This blog post discusses an old type of issue, vulnerabilities in image format parsers, in a newer context: on interactionless code paths in popular messenger apps. This research was focused on the Apple ecosystem and the image parsing API provided by it: the...

9.3CVSS7.3AI score0.09445EPSS
SaveExploits8
OSV
OSV
added 2020/04/13 1:15 p.m.31 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.5AI score
SaveExploits0References3
OSV
OSV
added 2020/04/13 1:15 p.m.6 views

DEBIAN-CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.9AI score0.01625EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/13 1:15 p.m.29 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.3AI score0.01625EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2020/04/13 1:15 p.m.46 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.8AI score0.01625EPSS
SaveExploits0References2
OSV
OSV
added 2020/04/13 1:15 p.m.15 views

UBUNTU-CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS7AI score0.01625EPSS
SaveExploits0References3
CVE
CVE
added 2020/04/13 12:04 p.m.233 views

CVE-2020-1759

CVE-2020-1759 affects Red Hat Ceph Storage 4 and Red Hat OpenShift Container Storage 4.2, where the secure mode of the messenger v2 protocol (msgr2) allows nonce reuse. This enables forging authentication tags and can lead to confidentiality and integrity problems in sessions when a nonce is reus...

6.8CVSS6.5AI score0.01625EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
added 2020/04/13 12:04 p.m.48 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.4CVSS6.7AI score0.01625EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2020/04/13 12:04 p.m.150 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.8AI score0.01625EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/04/13 12:04 p.m.88 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.8AI score0.01625EPSS
SaveExploits0
Veracode
Veracode
added 2020/04/10 12:55 a.m.33 views

Denial Of Service (DoS)

pidgin is vulnerable to denial of service DoS. The vulnerability exists as multiple NULL pointer dereference flaws were found in the way the Pidgin Yahoo! Messenger Protocol plug-in handled malformed YMSG packets. A remote attacker could use these flaws to crash Pidgin via a specially-crafted...

4CVSS2.2AI score0.02639EPSS
SaveExploits0References25Affected Software1
Veracode
Veracode
added 2020/04/10 12:48 a.m.25 views

Denial Of Service (DoS)

pidgin is vulnerable to denial of service. Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging...

4CVSS1.4AI score0.0327EPSS
SaveExploits1References28Affected Software1
Veracode
Veracode
added 2020/04/10 12:13 a.m.37 views

Restriction Bypass

SeaMonkey is vulnerable to Restriction Bypass. A flaw was found in SeaMonkey Messenger triggered when a HTML message contained a remote image pointing to a XBL script. An attacker could have created a carefully crafted message which would execute Javascript if certain actions were performed on th...

2.6CVSS1AI score0.02392EPSS
SaveExploits0References35Affected Software3
OSV
OSV
added 2020/04/08 6:15 p.m.12 views

CVE-2018-21042

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

9.8CVSS6AI score0.00628EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/08 6:15 p.m.29 views

CVE-2018-21042

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

9.8CVSS9.7AI score0.00628EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/08 6:15 p.m.24 views

Code injection

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

7.5CVSS9.6AI score0.00628EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/08 5:05 p.m.31 views

CVE-2018-21042

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

9.7AI score0.00628EPSS
SaveExploits0References1
Rows per page
Query Builder