CVE-2020-13660

CVE-2020-13660 concerns CMS Made Simple up to version 2.2.14, where an XSS vulnerability exists in the File Picker profile name. The connected sources consistently describe a cross-site scripting issue stemming from insufficient input/validation handling in the web application, enabling crafted p...

CVE-2020-13660: Improper Neutralization of Input During Web Page Generation

CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name...

PT-2020-13646

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 2.2.15 Description The issue allows for cross-site scripting XSS attacks through a crafted File Picker profile name. Recommendations For CMS Made Simple versions prior to 2.2.15, update to version 2.2.15 or...

CVE-2018-21059

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2018-21060

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...

CVE-2018-21059

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2018-21060

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...

Code injection

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2018-21059

The CVE-2018-21059 entry describes an information-disclosure issue on Samsung mobile devices running Android N (7.x) and O (8.x). Clipboard content is visible in the locked state via the emergency contact picker, exposing potentially sensitive data. Samsung’s internal identifier SVE-2018-11806 is...

CVE-2018-21059

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2018-21060

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...

PT-2020-8703

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.x software Description An issue was discovered where Clipboard content is visible in the locked state via the emergency contact picker. Recommendations For Samsung mobile...

CVE-2018-21060: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...

CVE-2018-21059: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

PT-2020-8704

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.x software Description An issue was discovered where there is a Keyboard learned words leak in the locked state via the emergency contact picker. Recommendations For...

OPENSUSE-SU-2020:0007-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 79.0.3945.88: - CVE-2019-13767: Fixed a use after free in media picker boo1159498 This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0007-1 Rating: important References: 1159498 Cross-References: CVE-2019-13767 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update...

CVE-2019-13767

Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2019-13767

Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...