CVE-2020-20096

Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20096

CVE-2020-20096 affects WhatsApp for iOS (2.19.80 and prior) and Android (2.19.222 and prior). The root cause described in the sources is that the user interface doesn’t properly represent URI messages, enabling URI spoofing through specially crafted messages. The linked documents collectively con...

CVE-2020-20095

iMessage Messages app iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20095

CVE-2020-20095 affects iMessage (Messages app) on iOS 12.4 and earlier, where the user interface fails to correctly render URI messages, enabling URI spoofing via specially crafted messages. The vulnerability relates to how the app presents links, potentially misleading users about the actual des...

CVE-2020-20094

Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20094

CVE-2020-20094 affects Instagram on iOS (106.0 and older) and Android (107.0.0.11 and older). The issue is a UI rendering flaw where URI messages are not represented correctly, enabling URI spoofing through specially crafted messages (RTLO-based manipulation). Multiple connected sources corrobora...

CVE-2020-20093

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20093

CVE-2020-20093 affects the Facebook Messenger app for iOS (227.0 and earlier) and Android (228.1.0.10.116 and earlier). The issue is in how URI messages are presented to users; the UI fails to accurately display URIs, enabling URI spoofing via specially crafted messages. The NVD CVSS data indicat...

CVE-2021-4180

An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the wwwauthenticateuri parameter which is visible to all end users in configuration files. This would give sensitive...

CVE-2020-20095: Undefined Security Weakness

iMessage Messages app iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20096: Undefined Security Weakness

Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20094: Undefined Security Weakness

Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

CVE-2020-20093: Undefined Security Weakness

The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages...

PT-2022-8607

Name of the Vulnerable Software and Affected Versions Facebook Messenger versions 227.0 and prior Facebook Messenger for Android versions 228.1.0.10.116 and prior Description The user interface of the Facebook Messenger app does not properly represent URI messages to the user, resulting in URI...

PT-2022-8610

Name of the Vulnerable Software and Affected Versions WhatsApp versions 2.19.80 and prior WhatsApp versions 2.19.222 and prior Description The user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages. Recommendations For...

PT-2022-8608

Name of the Vulnerable Software and Affected Versions Instagram versions 106.0 and prior iOS, 107.0.0.11 and prior Android Description The user interface does not properly represent URI messages to the user, resulting in URI spoofing via specially crafted messages. Recommendations For Instagram i...

OpenStack-Tripleo-Heat-Templates information leakage vulnerability

openstack-tripleo-heat-templates is a set of templates and tools for building Heat templates for OpenStack deployment. A security vulnerability exists in openstack-tripleo-heat-templates that stems from the fact that an attacker can exploit this by checking the wwwauthenticateuri parameter visibl...

PT-2022-8609

Name of the Vulnerable Software and Affected Versions iMessage Messages app versions prior to 12.4 Description The user interface of the iMessage app does not properly represent URI messages to the user. This results in URI spoofing via specially crafted messages. Recommendations For versions pri...

PT-2022-11485

Name of the Vulnerable Software and Affected Versions openstack-tripleo-heat-templates versions prior to 11.6.1 Description An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise (CVE-2021-44531)

Summary IBM App Connect Enterprise ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2021-44531 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by t...