8731 matches found
Mobile app usage soars but security still falls short
Benchmark analysis of mobile apps shows 99% have security or privacy vulnerabilities. These weaknesses can cause exposure of sensitive information and jeopardize brand reputation, customer trust and company value...
CVE-2022-27855
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
CVE-2022-27855
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
CVE-2022-27855
The CVE-2022-27855 CSRF vulnerability affects the Fatcat Apps Analytics Cat plugin for WordPress (versions ≤ 1.0.9). The issue allows an attacker to change plugin settings due to CSRF, enabling unintended configuration changes. Reported root cause is a cross-site request forgery flaw in plugin se...
Description of the security update for Office Web Apps Server 2013: November 8, 2022 (KB5002261)
Description of the security update for Office Web Apps Server 2013: November 8, 2022 KB5002261 Applies To Office Web Apps Server 2013 Summary This security update resolves a Microsoft Word information disclosure vulnerability, Microsoft Word remote code execution vulnerability, and Microsoft Exce...
PT-2022-5519 · Microsoft · Sharepoint Server +5
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected versions not specified Microsoft Office Web Apps...
CVE-2022-27855: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress allows Plugin Settings Change...
@cerebroapp/cerebro-basic-apps (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @finsemble/finsemble-core (>=1.0.0-beta-3, <=8.0.2) +7 more potentially affected by CVE-2022-36077 via electron (>=19.0.0, <=19.0.10)
electron NPM version =19.0.0, =1.0.0-alpha.0, =1.0.0-beta-3, =1.0.0-beta-3, =3.0.9, =0.36.0-canary.17, =2.0.74, =2.0.83 - simple-git-gui 3.8.31 Source cves: CVE-2022-36077 Source advisory: MEND:CVE-2022-36077...
Microsoft Office security vulnerabilities
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...
PT-2022-5518
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected versions not specified Microsoft Office Web Apps...
PT-2022-5641 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Description: The issue is related to a lack of...
PT-2022-5647
Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft Office versions affected versions not specified Description The issue exists due to insufficient inpu...
PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...
Security Updates for Microsoft Office Web Apps (November 2022)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-41060, CVE-2022-41103 ...
These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites
A set of four Android apps released by the same developer has been discovered directing victims to malicious websites as part of an adware and information-stealing campaign. The apps, published by a developer named Mobile apps Group and currently available on the Play Store, have been collectivel...
CVE-2022-32913
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. A sandboxed app may be able to determine which app is currently using the camera...
How Decentralized Apps Shaping the Future of the Internet
By Daily Contributors The internet has drastically changed the way we interact with the world. We can now connect with people… This is a post from HackRead.com Read the original post: How Decentralized Apps Shaping the Future of the Internet...
Malware on the Google Play store leads to harmful phishing sites
A family of malicious apps from developer Mobile apps Group are listed on Google Play and infected with Android/Trojan.HiddenAds.BTGTHB. In total, four apps are listed, and together they have amassed at least one million downloads. Older versions of these apps have been detected in the past as...
ASB-A-243924784
In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...