Lucene search
+L

20565 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2024/10/21 3:51 p.m.27 views

Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities

Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, vulnerabilites related to CORS misconfiguration and Certificate Pinning have been...

9.8CVSS10AI score0.24928EPSS
SaveExploits6Affected Software2
The Hacker News
The Hacker News
added 2024/10/21 11:25 a.m.32 views

Guide:  The Ultimate Pentest Checklist for Full-Stack Security

Pentest Checklists Are More Important Than Ever Given the expanding attack surface coupled with the increasing sophistication of attacker tactics and techniques, penetration testing checklists have become essential for ensuring thorough assessments across an organization's attack surface, both...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.8 views

Mitel MiCollab 安全漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. Mitel MiCollab suffers from a cross-site scripting vulnerability that can be exploited by attackers to inject malicious script or HTML code...

4.8CVSS5.9AI score0.00298EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.9 views

Mitel MiCollab 路径遍历漏洞

Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing, and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab version 9.8 SP1 FP2 9.8.1.201 and prior versions that stems from insufficient validation of...

9.1CVSS8.7AI score0.9811EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2024/10/21 12:00 a.m.19 views

PT-2025-1438 · Ibm · Ibm Cognos Mobile Client

Name of the Vulnerable Software and Affected Versions: IBM Cognos Mobile Client version 1.1 iOS Description: The issue is related to information disclosure through man-in-the-middle techniques due to the lack of certificate pinning. This could potentially allow unauthorized access to sensitive...

5.9CVSS8.3AI score0.002EPSS
SaveExploits0References8
Malwarebytes
Malwarebytes
added 2024/10/18 4:02 p.m.91 views

Unauthorized data access vulnerability in macOS is detailed by Microsoft

The Microsoft Threat Intelligence team disclosed details about a macOS vulnerability, dubbed "HM Surf," that could allow an attacker to gain access to the user’s data in Safari. The data the attacker could access without users’ consent includes browsed pages, along with the device’s camera,...

5.5CVSS6.5AI score0.0735EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.11 views

The vulnerability of the Ivanti Velocity License Server for mobile devices lies in its lack of access control mechanisms, which allows attackers to increase their privileges.

The vulnerability of the Ivanti Velocity License Server for mobile devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7CVSS5.5AI score0.00227EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2024/10/17 6:49 p.m.11 views

How to Choose the Best Analytics Tools for Mobile Apps

The app market is saturated with over 7 million apps across major stores. Analytics mobile apps have become…...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.13 views

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory, due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS6.3AI score0.00669EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.9 views

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the redirection of the URL during the loading of the login page to an unreliable website. Exploiting this vulnerability allows a hacker to execute arbitrary code...

7.2CVSS5.8AI score0.00626EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.10 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the use of an uninitialized resource as a result of an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service...

6.5CVSS5.7AI score0.00806EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.10 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS5.9AI score0.00806EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.11 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS5.9AI score0.00806EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.12 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS5.9AI score0.00818EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:00 a.m.11 views

The vulnerability of the Windows Mobile Broadband Driver allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a hacker to execute arbitrary code...

7.2CVSS5.8AI score0.00621EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:18 p.m.3 views

Malicious code in sfly-mobile-cart (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/16 1:18 p.m.4 views

MAL-2024-9839 Malicious code in sfly-mobile-cart (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2024/10/16 3:15 a.m.17 views

CVE-2024-10018

Improper permission control in the mobile application com.transsion.aivoiceassistant can lead to the launch of any unexported component...

9.8CVSS0.00501EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/16 2:33 a.m.52 views

CVE-2024-10018

CVE-2024-10018 affects the mobile app com.transsion.aivoiceassistant from TECNO/Transsion. The root cause is described as improper permission control, which can allow launching of any unexported component within the app. According to the cited sources, this can lead to high-impact outcomes affect...

9.8CVSS7.1AI score0.00501EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/16 2:33 a.m.10 views

CVE-2024-10018

Improper permission control in the mobile application com.transsion.aivoiceassistant can lead to the launch of any unexported component...

7.1AI score0.00501EPSS
SaveExploits0References2
Rows per page
Query Builder