Lucene search
+L

577 matches found

Openbugbounty
Openbugbounty
•added 2020/09/21 10:31 a.m.•20 views

students.ics.uci.edu GDPR PII Exposure vulnerability OBB-1351981

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.2AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2020/09/10 1:46 p.m.•25 views

Govt.-Backed Contact-Tracing Apps Raise Privacy Hackles

The Electronic Frontier Foundation is echoing lawmaker concerns that California is not taking privacy seriously enough, as state legislators mull launching a COVID-19 exposure-notification app based on Apple and Google’s smartphone technology. The U.S. nonprofit, which is aimed at protecting...

0.2AI score
SaveExploits0References18
NVD
NVD
•added 2020/09/08 10:15 a.m.•33 views

CVE-2019-14115

u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while touch is in non-secure domain as secure display is active' in Snapdragon Auto, Snapdragon Compute, Snapdragon...

5.5CVSS5.7AI score0.00211EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/09/08 9:31 a.m.•55 views

CVE-2019-14115

u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while touch is in non-secure domain as secure display is active' in Snapdragon Auto, Snapdragon Compute, Snapdragon...

5.7AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/08 9:31 a.m.•74 views

CVE-2019-14115

CVE-2019-14115 affects Qualcomm Snapdragon platforms (listed APQ/SDM/SC families) where information disclosure could occur when secure touch is released without clearing the secure display session, potentially allowing a user to read secure input while touch is in a non-secure domain. Root cause:...

5.5CVSS5.7AI score0.00211EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/01 8:34 p.m.•40 views

Malicious Package in s3asy

Version 0.4.8 of s3asy contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.4.8 of this module is found installed you will want ...

6.9AI score
SaveExploits0References2Affected Software1
ThreatPost
ThreatPost
•added 2020/08/27 4:10 p.m.•25 views

Facebook Hits Back At Apple’s iOS 14 Privacy Update

Facebook is lambasting an upcoming Apple mobile operating system privacy update, which requires application to ask users for permission before collecting and sharing their data. In the iOS 14 update, Apple iPhone and iPad users have an explicit option to opt out of allowing apps to collect data...

6.4AI score
SaveExploits0References13
HackRead
HackRead
•added 2020/07/30 5:27 p.m.•42 views

Flaws in OkCupid app could have exposed millions of user data to hackers

By Sudais Asif OkCupid app known as a popular dating platform has over 50 million registered users. This is a post from HackRead.com Read the original post: Flaws in OkCupid app could have exposed millions of user data to hackers...

3.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/28 9:27 a.m.•17 views

firminopolis.go.gov.br GDPR PII Exposure vulnerability OBB-1240795

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 4:03 p.m.•15 views

nichtraucherschutz.de GDPR PII Exposure vulnerability OBB-1223645

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 3:57 p.m.•21 views

coin-or.org GDPR PII Exposure vulnerability OBB-1223618

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 3:51 p.m.•12 views

eavesdrop.openstack.org GDPR PII Exposure vulnerability OBB-1223602

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 3:49 p.m.•26 views

thangamayil.com GDPR PII Exposure vulnerability OBB-1223596

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 3:16 p.m.•18 views

jira.mariadb.org GDPR PII Exposure vulnerability OBB-1223464

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 3:14 p.m.•15 views

libre-net.nl GDPR PII Exposure vulnerability OBB-1223457

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 6:21 a.m.•16 views

165.22.219.213 GDPR PII Exposure vulnerability OBB-1222412

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/07/12 6:13 a.m.•13 views

chronomarket.co.uk GDPR PII Exposure vulnerability OBB-1222411

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Prion
Prion
•added 2020/06/19 5:15 p.m.•26 views

Code injection

An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy...

4CVSS4.2AI score0.00738EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/06/19 4:49 p.m.•5 views

CVE-2018-21260

An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy...

5.1CVSS0.00738EPSS
SaveExploits0References1
CVE
CVE
•added 2020/06/19 4:49 p.m.•54 views

CVE-2018-21260

CVE-2018-21260 affects Mattermost Server versions before 4.8.1, 4.7.4, and 4.6.3. The issue arises from WebSocket events being accidentally sent during certain user-management operations, leading to potential user-privacy disclosure. The available documents confirm the vulnerable component (Matte...

4CVSS4.1AI score0.00738EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder