7022 matches found
CVE-2024-45833 Mobile password gets saved in dictionary under conditions
Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...
PT-2024-29087
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 Description The issue allows an app to potentially enumerate a user's installed apps. This was addressed with improved data protection. Recommendations For iOS versions prior to 18, update t...
Mattermost Mobile Apps 安全漏洞
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.18.0 and prior versions, which stems from the inability to disable the autocomplete feature at login...
RHSA-2007:0157 Red Hat Security Advisory: xorg-x11-apps and libX11 security update
Bulletin has no description...
[SECURITY] Fedora 41 Update: flatpak-1.15.10-1.fc41
flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...
Microsoft Security Update Validation Report September 2024
Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...
Security Updates for Microsoft Office Online Server (September 2024)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2024-43465 Note that Nessus has not tested for this iss...
CVE-2024-40659
In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...
CVE-2024-38194
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...
CVE-2024-38194
CVE-2024-38194 represents an Elevation of Privilege vulnerability in Azure Web Apps caused by improper authorization. The CVE is cited as enabling an authenticated attacker to elevate privileges over a network. Connected sources corroborate Azure Web Apps as the affected product and indicate Micr...
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability
...
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability
...
Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches
Shadow apps, a segment of Shadow IT, are SaaS applications purchased without the knowledge of the security team. While these applications may be legitimate, they operate within the blind spots of the corporate security team and expose the company to attackers. Shadow apps may include instances of...
Azure Web Apps Elevation of Privilege Vulnerability
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the addPreferencesForType method in the AccountTypePreferenceLoader.java file contains a proxy confusion with a possible way to...
PT-2024-27899 · Microsoft · Azure Web Apps
Name of the Vulnerable Software and Affected Versions: Azure Web Apps affected versions not specified Description: An authenticated attacker can exploit an improper authorization issue in Azure Web Apps to elevate privileges over a network. Recommendations: At the moment, there is no information...
KLA73221 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure CycleCloud can be exploited remotely to execute...
SUSE-SU-2024:3174-1 Security update for bubblewrap and flatpak
This update for bubblewrap and flatpak fixes the following issues: - CVE-2024-42472: Fixed access to files outside sandbox for apps using persistent bsc1229157...