17961 matches found
Arid Viper Targeting Arabic Android Users with Spyware Disguised as Dating App
The threat actor known as Arid Viper aka APT-C-23, Desert Falcon, or TAG-63 has been attributed as behind an Android spyware campaign targeting Arabic-speaking users with a counterfeit dating app designed to harvest data from infected handsets. "Arid Viper's Android malware has a number of featur...
PT-2023-27276 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the latest patchday Description: The issue is related to improper input validation, allowing for the bypass of user notification of foreground services. This could lead to local escalation of privilege with no...
PeopleSoft Enterprise CC Common Application Objects Unauthenticated Access
The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component in the Oracle PeopleSoft Products suite of business applications is related to insufficient validation of input data. Exploiting this vulnerability may allow an...
SUSE: Security Advisory (SUSE-SU-2023:4212-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
pahaa.de Improper Access Control vulnerability OBB-3766310
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE-SU-2023:4214-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Updated to version 115.4.0 ESR bsc1216338: - CVE-2023-5721: Fixed a potential clickjack via queued up rendering. - CVE-2023-5722: Fixed a cross-Origin size and header leakage. - CVE-2023-5723: Fixed unexpected errors when handling inval...
SUSE-SU-2023:4213-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Updated to version 115.4.0 ESR bsc1216338. - CVE-2023-5721: Fixed a potential clickjack via queued up rendering. - CVE-2023-5722: Fixed a cross-Origin size and header leakage. - CVE-2023-5723: Fixed unexpected errors when handling inval...
CVE-2023-43509
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...
CVE-2023-43509
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...
Design/Logic Flaw
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...
CVE-2023-43509 Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to computers that are running ClearPass OnGuard. These notifications can then be used to phish users or trick them into downloading...
CVE-2023-43509
Summary of CVE-2023-43509 : A vulnerability exists in the web-based management interface of Aruba ClearPass Policy Manager that could allow an unauthenticated remote attacker to send notifications to computers running ClearPass OnGuard. This can be used to phish users or prompt downloads of malwa...
Mozilla Firefox Security Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 119, which originates from a website that may obscure full-screen notifications by using a file open dialog box. This may cause user confusion...
Cross-site Scripting (XSS)
Overview TinyMCE is a web-based JavaScript HTML WYSIWYG editor control. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Notification Manager API due to improper input sanitization. An attacker can execute arbitrary JavaScript when a notification is presented i...
CVE-2023-22090
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Events & Notifications. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2023-22090
CVE-2023-22090 affects Oracle PeopleSoft Enterprise CC Common Application Objects (component: Events & Notifications) version 9.2. The vulnerability arises from insufficient input validation in the CC Common Application Objects, allowing a low-privileged attacker with HTTP-access network reach to...
CVE-2023-22090: Undefined Security Weakness
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Events & Notifications. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2023-44101
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality...