CVE-2022-25210: Improper Synchronization

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

Jenkins 插件 安全漏洞

Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. Jenkins Convertigo Mobile Platform Plugin Information Disclosure Vulnerability. An attacker can use this vulnerability to capture the password of a job that is to be configured...

Missing synchronization vulnerability in convertigo-mobile-platform allow to capture passwords

convertigo-mobile-platform 1.1 and earlier uses static fields to store job configuration information. This allows attackers with Item/Configure permission to capture passwords of the jobs that will be configured. As of publication of this advisory, there is no fix. Learn why we announce this...

CVE-2015-7731

SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830...

Information disclosure

SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830...

CVE-2015-7731

SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830...

CVE-2015-7731

SAP Mobile Platform 3.0 SP05 ClientHub has an information-disclosure flaw in the DataVault that could allow an attacker to obtain the keystream and other sensitive data. The issue is documented as SAP Security Note 2094830; the exact root cause and affected components are not fully detailed in th...

CVE-2015-7731: Exposure of Sensitive Information to an Unauthorized Actor

SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830...

PT-2021-8391

Name of the Vulnerable Software and Affected Versions SAP Mobile Platform 3.0 SP05 ClientHub Description The issue allows attackers to obtain the keystream and other sensitive information via the DataVault. Recommendations For SAP Mobile Platform 3.0 SP05 ClientHub, consider applying the fix...

SAP Mobile 信息泄露漏洞

SAP Mobile is a mobility application. It mainly runs on mobile devices mainly on iOS. An information disclosure vulnerability exists in SAP Mobile Platform 3.0 SP05, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

CVE-2021-30496

The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service application crash if the victim pastes an attacker-supplied message e.g., in the Persian language into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that...

Logic Flaw Vulnerability in JieLink+ Mobile Charging Terminal

JieLink+ mobile charging terminal is a new generation of intelligent terminal operation platform solution launched by Shenzhen Jieshun Technology Industry Co. JieLink+ Mobile Toll Collection Terminal has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive informati...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 14.0 and iPadOS prior to 14.0, which stems from the handling of maliciously...

CVE-2021-1417

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

PT-2021-2074 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for iOS affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Microsoft Teams for iOS, which could allow a remote attacker to gain unauthorized access to protected...

PT-2021-10082 · Red Hat · Keycloak Gatekeeper +1

Name of the Vulnerable Software and Affected Versions: Keycloak Gatekeeper Louketo versions 6.0.1, 7.0.0 Red Hat Mobile Application Platform 4 Description: A flaw was found in the logout endpoint, which can be abused to redirect logged-in users to arbitrary web pages. This issue could be used in...

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

HCL Technologies Nomad Information Disclosure Vulnerability

HCL Technologies Nomad is an application from HCL Technologies India for using, managing Domino application development platform in mobile devices. A security vulnerability exists in HCL Technologies Nomad for Android and iOS platforms, which stems from the fact that the software communicates in...

SAP Mobile Platform Input Validation Error Vulnerability

SAP Mobile Platform SMP is a set of mobile application development platform from SAP. An input validation error vulnerability exists in SAP Mobile Platform, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the SAP Mobile Platform SDK, related to resource management errors, allows a perpetrator to trigger a service failure.

The vulnerability of the SAP Mobile Platform SDK, a software development platform, is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...