4161 matches found
CVE-2019-18988
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the...
IBM Security Directory Server Information Disclosure Vulnerability (CNVD-2020-04413)
IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. IBM Security Directory Server, version 6.4.0, stores sensitiv...
About the security content of iCloud for Windows 7.15 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of Safari 13.0.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
KLA11660 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A...
PT-2020-6282
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to insufficient policy enforcement in the Safe Browsing feature, allowing a remote attacker to bypass navigation restrictions. This can be achieved via a crafted HTM...
Kaspersky Anti-Virus Security Bypass
The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud lies in insufficient validation of input data. Exploiting this vulnerability c...
Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1326)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-14766
Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem...
CVE-2019-14766
Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem...
PT-2020-9601
Name of the Vulnerable Software and Affected Versions DIMO YellowBox CRM versions prior to 6.3.4 Description The issue allows a standard authenticated user to browse the server filesystem due to a path traversal vulnerability in the file browser. Recommendations For versions prior to 6.3.4, updat...
CVE-2019-18893
XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code in the context of this component. While Video Downloader is technically a browser extension, it is granted a very wide set of privileges...
PT-2020-10004
Name of the Vulnerable Software and Affected Versions Avast Secure Browser version 77.1.1831.91 AVG Secure Browser version 77.0.1790.77 Description The issue allows websites to execute their code in the context of the Video Downloader component, which has a wide set of privileges. This includes...
CVE-2019-17018
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...
Code injection
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...
CVE-2019-17018
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...
UBUNTU-CVE-2019-17018
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...
CVE-2019-17018
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...
CVE-2019-17018
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affects Firefox 72...
CVE-2019-17018
CVE-2019-17018 affects Mozilla Firefox versions before 72 on Windows 10, where in Private Browsing Mode the Windows keyboard may retain word suggestions to improve keyboard accuracy. This is the asserted vulnerability detail; no additional remediation or exploit information is provided in the con...