CVE-2018-4387

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4388

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.1...

CVE-2018-4379: Exposure of Sensitive Information to an Unauthorized Actor

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...

CVE-2018-4388: Exposure of Sensitive Information to an Unauthorized Actor

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.1...

PT-2019-10932

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 Description: A lock screen issue allowed unauthorized access to contacts on a locked device. This was addressed with improved state management. Recommendations: For versions prior to 12.1.1, update to iOS 12.1.1 o...

PT-2019-10902

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 Description: A lock screen issue allowed unauthorized access to the share function on a locked device. The issue was addressed by restricting options offered on a locked device. Recommendations: For versions prior t...

CVE-2018-4430: Exposure of Sensitive Information to an Unauthorized Actor

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1...

CVE-2018-4380: Exposure of Sensitive Information to an Unauthorized Actor

A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1...

CB Threat Intelligence Notification: Vidar InfoStealer Trojan Aims to Steal Data Before Erasing Itself

Vidar is an info stealer trojan, which was sold under the name Vidar Pro stealer and can be distributed through different campaigns. This malware will perform multiple types of malicious behavior including stealing web browser cookies and history, digital wallets, two-factor authentication data,...

March 26, 2019—KB4490481 (OS Build 17763.402)

None None...

CVE-2019-10015

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...

CVE-2019-10015

CVE-2019-10015 affects baigoStudio baigoSSO v3.0.1. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying payload in the first form field of the configuration screen, where the code is written to BG_SITE_NAME in opt_base.inc.php. This results in remote code executio...

CVE-2019-10015

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...

CVE-2019-10027: Improper Neutralization of Input During Web Page Generation

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox aka E-mail field on the personal information screen...

PT-2019-11299

Name of the Vulnerable Software and Affected Versions: PHPCMS versions 9.6.x through 9.6.3 Description: The issue is related to a XSS flaw via the mailbox field on the personal information screen, allowing potential exploitation. Recommendations: For PHPCMS versions 9.6.x through 9.6.3, update to...

PT-2019-11287

Name of the Vulnerable Software and Affected Versions: baigoStudio baigoSSO version 3.0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen. This is possible because the code is written to the BG SITE NAME field in the...

OPENSUSE-SU-2019:0310-1 Security update for gdm

This update for gdm fixes the following issues: Security issue fixed: - CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled bsc1124628. Other issues fixed: - GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that thi...

[Citrix Receiver 4.9.5000 for Windows] - Display Issues when user re-docks their Notebook on the docking station and reconnecting to Citrix Session with Multiple Monitors

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Scenario : Users using notebooks and working with full screen sessions without desktop viewer to access...

[Workspace App for Windows] - Display Issues when user re-docks their Notebook on the docking station and reconnecting to Citrix Session with Multiple Monitors

Scenario : Users using notebooks and working with full screen sessions without desktop viewer to access their Citrix session, aka mobile thin client. The users usually have a docking station and two identical monitors at their workplace. When these users come back from a meeting and re-dock into...

Code injection

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and clicking the full screen button in the bottom right, an attacker could exploit this vulnerability to close the program and launch other...