CVE-2024-45833

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

CVE-2024-45833

Mattermost Mobile Apps <= 2.18.0 exposes passwords: the login autocomplete is not disabled when the password is typed and the visible password is selected, allowing the password to be saved in SwiftKey’s dictionary when a special character is used and masking is off. Affected: Mattermost Mobil...

CVE-2024-45833 Mobile password gets saved in dictionary under conditions

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

CVE-2024-45833: Protection Mechanism Failure

Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...

Mattermost Mobile Apps Security Vulnerabilities

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.18.0 and prior versions, which stems from the inability to disable the autocomplete feature at login...

PT-2024-29087

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 Description The issue allows an app to potentially enumerate a user's installed apps. This was addressed with improved data protection. Recommendations For iOS versions prior to 18, update t...

RHSA-2007:0157 Red Hat Security Advisory: xorg-x11-apps and libX11 security update

Bulletin has no description...

[SECURITY] Fedora 41 Update: flatpak-1.15.10-1.fc41

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...

Microsoft Security Update Validation Report September 2024

Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...

Security Updates for Microsoft Office Online Server (September 2024)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2024-43465 Note that Nessus has not tested for this iss...

CVE-2024-8269: Improper Access Control

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 4.15.3. This is due to the plugin not checking that user registration is enabled prior to creating a user account through the...

CVE-2024-40659

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...

CVE-2024-38194

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...

CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability

...

CVE-2024-38194

CVE-2024-38194 represents an Elevation of Privilege vulnerability in Azure Web Apps caused by improper authorization. The CVE is cited as enabling an authenticated attacker to elevate privileges over a network. Connected sources corroborate Azure Web Apps as the affected product and indicate Micr...

CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability

...

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

Shadow apps, a segment of Shadow IT, are SaaS applications purchased without the knowledge of the security team. While these applications may be legitimate, they operate within the blind spots of the corporate security team and expose the company to attackers. Shadow apps may include instances of...

Azure Web Apps Elevation of Privilege Vulnerability

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...

PT-2024-27899 · Microsoft · Azure Web Apps

Name of the Vulnerable Software and Affected Versions: Azure Web Apps affected versions not specified Description: An authenticated attacker can exploit an improper authorization issue in Azure Web Apps to elevate privileges over a network. Recommendations: At the moment, there is no information...

CVE-2024-38194: Improper Input Validation

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...