Lucene search
+L

18117 matches found

Prion
Prion
•added 2020/06/19 5:15 p.m.•29 views

Design/Logic Flaw

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler e.g., video, audio, and notifications...

5CVSS5.4AI score0.00769EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/06/19 4:51 p.m.•32 views

CVE-2018-21265

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler e.g., video, audio, and notifications...

5.4AI score0.00769EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/19 12:00 a.m.•5 views

CVE-2018-21265: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler e.g., video, audio, and notifications...

5.3CVSS5.8AI score0.00769EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/19 12:00 a.m.•7 views

PT-2020-8456

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.8.2 Mattermost Server versions prior to 3.7.5 Mattermost Server versions prior to 3.6.7 Description: An issue was discovered where e-mail notifications can have spoofed links. Recommendations: For version...

4.3CVSS0.00581EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/19 12:00 a.m.•8 views

CVE-2017-18910: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. E-mail notifications can have spoofed links...

4.3CVSS5.8AI score0.00581EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2020/06/10 5:27 p.m.•13 views

gurusoft.no Cross Site Scripting vulnerability OBB-1191815

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/06/10 12:00 a.m.•19 views

Apple iOS and Apple iPadOS Notifications Component Information Disclosure Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. notifications is one of the notification push components. An information disclosure vulnerability exists in the...

2.4CVSS5.5AI score0.00288EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/06/09 5:15 p.m.•17 views

CVE-2020-9848

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

2.4CVSS5.8AI score0.00288EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/06/09 5:15 p.m.•17 views

CVE-2020-9848

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

2.4CVSS5.3AI score0.00288EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/09 12:00 a.m.•16 views

PT-2020-20803 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 Description: An authorization issue was addressed with improved state management, allowing a person with physical access to an iOS device to potentially view notification contents from...

2.4CVSS2.7AI score0.00288EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/06/04 6:15 p.m.•21 views

CVE-2020-13838

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

3.5CVSS5.8AI score0.0013EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/04 6:15 p.m.•30 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

3.6CVSS4.3AI score0.0013EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/06/04 5:01 p.m.•53 views

CVE-2020-13838

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

4.2AI score0.0013EPSS
SaveExploits0References1
CVE
CVE
•added 2020/06/04 5:01 p.m.•96 views

CVE-2020-13838

CVE-2020-13838 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the DeX Lockscreen fails to block access to the Quick Panel and notifications. The issue is documented across multiple sources (NVD entry and Red Hat advisory) without details on a concrete exploit vector o...

3.6CVSS4.3AI score0.0013EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2020/06/04 12:00 a.m.•56 views

Unspecified vulnerability in Google Chrome notifications

Google Chrome is a web browser by Google, Inc. notifications is one of the notification components. A security vulnerability in notifications in versions of Google Chrome prior to 74.0.3729.108 exists because the program fails to fully enforce policies, which can be exploited by remote attackers ...

4.3CVSS6.6AI score0.00558EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•8 views

CVE-2020-13838: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

3.6CVSS5.8AI score0.0013EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/04 12:00 a.m.•4 views

PT-2020-13719

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 software Description An issue was discovered where the DeX Lockscreen feature does not block access to Quick Panel and notifications. Recommendations For Samsung mobile devices with P9.0 software,...

3.6CVSS0.0013EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/06/03 10:50 p.m.•29 views

CVE-2020-6504

Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a crafted HTML page...

5AI score0.00558EPSS
SaveExploits1References2
Qualys Blog
Qualys Blog
•added 2020/06/03 8:59 p.m.•30 views

Product, API & Library Notifications Move to Notifications.qualys.com

Qualys has consolidated notifications of new product features, API changes, and policy library updates at Qualys Notifications to make it easier for our customers to track these changes in one place. Now you will find important notifications such as the latest new Qualys Cloud Platform app...

0.4AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2020/06/01 11:08 a.m.•37 views

Password Changing After a Breach

This study shows that most people don't change their passwords after a breach, and if they do they change it to a weaker password. Abstract: To protect against misuse of passwords compromised in a breach, consumers should promptly change affected passwords and any similar passwords on other...

1AI score
SaveExploits0
Rows per page
Query Builder