3713 matches found
Cloud vs on premises: 3 reasons the Cloud is winning
Thanks to the vast rollout of COVID-19 vaccines to millions of people in the US and Europe, some of us are finally seeing some semblance of a return to normalcy. And organizations, who have experienced first-hand the struggle to stay afloat during months of struggle, are expecting to transition...
Chromium: CVE-2021-30550 Use after free in Accessibility
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Google Chrome 资源管理错误漏洞
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Accessibility in Google Chrome versions prior to 91.0.4472.101. No detailed vulnerability details are provided at this...
The vulnerability of the oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS component in the Jackson-databind library of the FasterXML project allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
The vulnerability of the com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to compromise th...
Code injection
Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...
The vulnerability of the Microsoft Accessibility Insights browser extension, related to the lack of data protection for service data, allows a malicious actor to gain unauthorized access to the device.
The vulnerability of the Microsoft Accessibility Insights browser extension is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device through a specially created web page...
The vulnerability of the asynchronous input/output interface io_uring in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the asynchronous input/output interface iouring in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
TeaBot Trojan Targets Banks via Hijacked Android Handsets
Researchers have discovered an Android trojan that can steal victims’ SMS messages and credentials and completely take over devices. The trojan, dubbed TeaBot, is aimed at committing fraud against at least 60 banks in Europe. Join Threatpost for “Fortifying Your Business Against Ransomware, DDoS ...
Patch Tuesday - May 2021
Here we are again with another installment of Patch Tuesday. When compared to the past few months this one feels a bit light both in severity and number of vulnerabilities addressed. Microsoft has only released patches for 55 CVEs this month, less than half of the usual volume, with only 4 of the...
CVE-2021-31936
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...
CVE-2021-31936
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...
Information disclosure
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...
CVE-2021-31936
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...
EUVD-2021-18809
Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...
CVE-2021-31936
CVE-2021-31936 corresponds to a Microsoft vulnerability affecting Microsoft Accessibility Insights for Web. The connected PT-2021-3046 entry indicates a flaw related to insufficient protection of service data in the Microsoft Accessibility Insights for Web browser extension, which could allow a r...
CVE-2021-31936 Microsoft Accessibility Insights for Web Information Disclosure Vulnerability
...
Experts warn of a new Android banking trojan stealing users' credentials
Cybersecurity researchers on Monday disclosed a new Android trojan that hijacks users' credentials and SMS messages to facilitate fraudulent activities against banks in Spain, Germany, Italy, Belgium, and the Netherlands. Called "TeaBot" or Anatsa, the malware is said to be in its early stages of...
