Lucene search
+L

4094 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/18 12:00 a.m.•6 views

CVE-2014-4427: Undefined Security Weakness

App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API...

7.5CVSS5.9AI score0.01214EPSS
SaveExploits0References2
Prion
Prion
•added 2014/10/08 7:55 p.m.•22 views

Default configuration

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURESECUREPROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document...

6.8CVSS7.5AI score0.01696EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2014/10/08 7:00 p.m.•38 views

CVE-2014-7296

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURESECUREPROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document...

7.1AI score0.01696EPSS
SaveExploits0References2
CVE
CVE
•added 2014/10/08 7:00 p.m.•61 views

CVE-2014-7296

CVE-2014-7296 affects SpagoBI 5.0.0: the accessibility engine’s default config does not enable FEATURE_SECURE_PROCESSING, allowing remote authenticated users to execute arbitrary Java code through a crafted XSL document. Impact is code execution with partial confidentiality/integrity/availability...

6.8CVSS7.3AI score0.01696EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/08 12:00 a.m.•4 views

CVE-2014-7296: Improper Control of Generation of Code

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURESECUREPROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document...

6.8CVSS6.4AI score0.01696EPSS
SaveExploits0References2
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2014/10/07 12:00 a.m.•45 views

Stable Channel Update for Chrome OS

The Stable channel has been updated to 38.0.2125.101 Platform version: 6158.49.0, 6158.56.0 for all Chrome OS devices except Chromeboxes. This build contains a number of bug fixes, security updates and feature enhancements. Systems will be receiving updates over the next several days. Here is a...

10CVSS9.5AI score0.05999EPSS
SaveExploits0Affected Software1
Fedora
Fedora
•added 2014/09/27 9:47 a.m.•28 views

[SECURITY] Fedora 20 Update: kmousetool-4.14.1-1.fc20

A program for people whom it hurts to click the mouse...

6.9CVSS0.9AI score0.00359EPSS
SaveExploits1
Fedora
Fedora
•added 2014/09/27 9:47 a.m.•32 views

[SECURITY] Fedora 20 Update: kaccessible-4.14.1-1.fc20

Provides accessibility services like focus tracking and a screen reader...

6.9CVSS2.5AI score0.00359EPSS
SaveExploits1
NVD
NVD
•added 2014/09/18 10:55 a.m.•27 views

CVE-2014-4368

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

6.9CVSS5.5AI score0.00355EPSS
SaveExploits0References6
Prion
Prion
•added 2014/09/18 10:55 a.m.•25 views

Design/Logic Flaw

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

6.9CVSS5.9AI score0.00355EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2014/09/18 10:00 a.m.•59 views

CVE-2014-4368

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

5.5AI score0.00355EPSS
SaveExploits0References6
CVE
CVE
•added 2014/09/18 10:00 a.m.•68 views

CVE-2014-4368

The CVE-2014-4368 entry concerns Apple iOS prior to version 8, where a logic issue in the Accessibility subsystem affecting AssistiveTouch event handling could interfere with screen locking. In practical terms, this means that under certain AssistiveTouch-related sequences, the device may fail to...

6.9CVSS5.5AI score0.00355EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/18 12:00 a.m.•5 views

CVE-2014-4368: Undefined Security Weakness

The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events...

6.9CVSS5.9AI score0.00355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/09/18 12:00 a.m.•50 views

Apple iOS < 8 Multiple Vulnerabilities

Binary data appleios80check.nbin...

9.3CVSS7.3AI score0.48923EPSS
SaveExploits14References59
Microsoft Security Update
Microsoft Security Update
•added 2014/08/26 5:00 p.m.•31 views

Update for Microsoft Silverlight (KB2977218)

This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...

3.3AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/08/07 3:00 p.m.•11 views

Yahoo to Release End-to-End Encryption for Email Users

LAS VEGAS–Yahoo plans to enable end-to-end encryption for all of its Mail users next year. The company is working with Google on the project and the encryption will be mostly transparent for users, making it as simple as possible to use. Alex Stamos, CISO at Yahoo, said that the project has been ...

7.2AI score
SaveExploits0References2
The Hacker News
The Hacker News
•added 2014/07/30 9:38 p.m.•22 views

Facebook's Internet.Org App Offers Free Internet in Zambia

Earlier this month, the founder of the Social Networking giant highlighted the future of universal Internet access, the dream that Facebook founder Mark Zuckerberg wants to fulfil, in an effort to make Internet access available to everyone across the world just like a service as essential as of 9...

6.4AI score
SaveExploits0
Fedora
Fedora
•added 2014/07/26 12:11 a.m.•58 views

[SECURITY] Fedora 20 Update: cinnamon-control-center-2.2.10-1.fc20.1

This package contains configuration utilities for the Cinnamon desktop, whi ch allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

2.9CVSS2.4AI score0.01457EPSS
SaveExploits1
Fedora
Fedora
•added 2014/07/26 12:11 a.m.•36 views

[SECURITY] Fedora 20 Update: control-center-3.10.3-2.fc20

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

2.9CVSS2.7AI score0.01457EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2014/07/02 12:00 a.m.•30 views

Apple iOS < 8.0 Multiple Vulnerabilities

Binary data 8393.prm...

9.3CVSS7.3AI score0.48923EPSS
SaveExploits14References58
Rows per page
Query Builder