114 matches found
July 12, 2022—KB5015877 (Security-only update)
None None...
CVE-2022-23433: Improper Access Control
Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S12, 12.2.05.6000 in Android R11 and 11.6.08.6000 in Andoid Q10 allows attackers to register reminders or execute exporeted activities remotely...
PT-2022-15991 · Sreminder · Reminder
Name of the Vulnerable Software and Affected Versions: Reminder versions prior to 12.3.01.3000 Reminder versions prior to 12.2.05.6000 Reminder versions prior to 11.6.08.6000 Description: The issue is related to improper access control in the Reminder application, allowing attackers to register...
Defending Assets You Don’t Know About Against Cyberattacks
Back in the 90s, we all used to build massive firewalls around our systems and spent our day-to-day resources looking for holes to patch. In theory, an impenetrable wall around everything you own is a great idea, because it protects even the things you’ve forgotten about. However, if a wall is yo...
Lark Technologies: [IDOR] Modify other team's reminders via reminderId parameter
An IDOR Insecure Direct Object Reference vulnerability was found in Larksuite reminders, allowing an attacker to modify any other user's reminder in the POST request via "reminderId" parameter. We thank imrannisar for reporting this vulnerability and confirming its resolution...
Oversharing and safety in the age of social media
Many years ago, I worked with healthcare organizations to install infrastructure to support the modernization of their information systems. As I traversed hospitals – both in public and private sectors – I was often struck by one particular best practice: the privacy reminders were ubiquitous. If...
Date Reminder - Moderately critical - Access bypass - SA-CONTRIB-2018-076
This module allows registered users to request email reminders to be sent at a specified time before an event. The module doesn't sufficiently check access to nodes, allowing a user to set a reminder on a node that the user shouldn't be able to access. This can be mitigated with configuring...
Redmine Information Disclosure Vulnerability (CNVD-2017-36111)
Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in the 'reminders' function in the app/models/mailer.rb file in Redmine...
Design/Logic Flaw
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
CVE-2017-16804
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
CVE-2017-16804
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
DEBIAN-CVE-2017-16804
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
CVE-2017-16804
CVE-2017-16804 affects Redmine before 3.2.7 and 3.3.x before 3.3.4. The vulnerability lies in the reminders function (app/models/mailer.rb) which does not verify issue visibility, allowing remote authenticated users to disclose sensitive information by reading e-mail reminder messages. Affected v...
CVE-2017-16804
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
CVE-2017-16804: Exposure of Sensitive Information to an Unauthorized Actor
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...
Microsoft Cortana Can Now Read Your Skype Messages to Make Chat Smarter
Microsoft today announced built-in support for Cortana—an artificial intelligence-powered smart assistant—in Skype messenger on Android as well as iOS devices. What purpose does it serve? Microsoft wants its AI-based smart assistance to understand your conversations and help you with quick...
Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities
Binary data 9327.prm...
The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a phone number collection event without the user’s permission.
The vulnerability of the Reminders component in the Mac OS X operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, acting remotely, to trigger a phone number collection event without user permission by clicking on the “tel” link...
Apple OS X Reminders Unauthorized Operation Vulnerability
Apple OS X is a specialized operating system developed by Apple for Mac computers.Reminders is one of the components of the application used to set up various types of reminders. An unauthorized manipulation vulnerability exists in Reminders in Apple OS X versions prior to 10.11.4. The...
