CVE-2021-26917: Undefined Security Weakness

PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported awa...

PT-2021-17174 · Unknown · Pybitmessage

Name of the Vulnerable Software and Affected Versions: PyBitmessage versions 0.6.3.2 and earlier Description: The issue allows attackers to write screen captures to potentially unwanted directories via a crafted apinotifypath value. It is noted that security mitigation may not be necessary as the...

Design/Logic Flaw

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

Psyprax Security Vulnerability

A security vulnerability exists in Psyprax before 3.2.2 that stems from the file %PROGRAMDATA%Psyprax32PPScreen.ini containing the application lock screen hash. If this entry is removed, the lock screen will no longer be displayed...

CVE-2019-16268

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen...

February 2, 2021—KB4598291 (OS Builds 19041.789 and 19042.789) Preview

None None...

Apple Phone Keypad Security Flaw

The Apple Phone Keypad is an American Apple component used in mobile devices to support the phone's keypad functionality. A security vulnerability exists in Apple Phone Keypad, which originates from the lock screen allowing access to contacts on a locked device. The following products and models...

CentOS 8 : GNOME (CESA-2020:1766)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1766 advisory. - LibRaw: stack-based buffer overflow in the parsemakernote function of dcrawcommon.cpp CVE-2018-20337 - gvfs: mishandling of file ownership in...

Information Disclosure

firefox is vulnerable to information disclosure. The browsercan be confused into transferring a screen sharing state into another tab, which would leak confidential information...

Mozilla Firefox < 85.0

The version of Firefox installed on the remote Windows host is prior to 85.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-03 advisory. - Mozilla developers Sebastian Hengst, Christian Holler, Tyson Smith reported memory safety bugs present in Firefox 84...

PT-2021-2601

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 85 Description The issue is related to errors in resource management, potentially allowing a remote attacker to gain unauthorized access to protected information. It could also cause the browser to leak unintended...

UBUNTU-CVE-2021-23958

The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox 85...

CVE-2021-23958

The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox 85...

PT-2021-3558

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72 Description The issue is related to the inappropriate implementation in full screen mode, allowing a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. This can...

Beware — A New Wormable Android Malware Spreading Through WhatsApp

A newly discovered Android malware has been found to propagate itself through WhatsApp messages to other contacts in order to expand what appears to be an adware campaign. "This malware spreads via victim's WhatsApp by automatically replying to any received WhatsApp message notification with a li...

January 21, 2021—KB4598298 (OS Build 18363.1350) Preview

None None...

January 21, 2021-KB4598296 (OS Build 17763.1728) Preview

None None...

Weak Password Vulnerability in Shanghai Xisun's Intelligent Light Pole Advertising Screen Management System

Shanghai Xixun Electronic Technology Co., Ltd. was founded in 2006, is a professional LED display control system supplier, has many years of LED display control system development experience. Shanghai Xixun intelligent light pole advertising screen management system has a weak password...

The vulnerability of the Windows operating system, related to errors in the code, allows a hacker to bypass Windows’ screen lock security features.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to bypass Windows’ screen lock security features...

Adobe Captivate 代码问题漏洞

Adobe Captivate 2019 is a screen recording software. An uncontrolled search path element vulnerability exists in Adobe Captivate 2019 11.5.1.499 and earlier versions. An attacker can exploit the vulnerability to elevate privileges...