8582 matches found
CVE-2022-31752
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality...
CVE-2022-31752
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality...
CVE-2022-31752
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality...
CVE-2022-31752
Technical details for CVE-2022-31752 are not publicly available in the provided documents. Monitor for updates.
Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones
A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones and therefore, individuals. The identification, at its core, hinges on imperfections in the Bluetooth...
Malicious code in @manomano-toolbox/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4141fb4b8de9f49fbbe144aa0dacfbda2d8ec36a8314190745e67a161d0bd481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PartKeepr Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in PartKeepr version 1.4.0, which is an inventory management software designed primarily for electronic components. The vulnerability stems from a security issue in the name field in /api/partcategories. An attacker could exploit this vulnerability to...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android. There is no information about this vulnerability yet, please stay tuned to CNNVD or the vendor's announcement...
Malicious code in @chegg-me-components/header (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-168 Malicious code in @chegg-me-components/header (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-200 Malicious code in @design-components/customer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2666e2e1994e04e2770cc4ad18bf2c0538aaca1cf1b0889dcea405c50b632e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in trezor-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6988db5be258f1aa0def05723411080dc261386d487115e474c4ba25b71d09e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6646 Malicious code in trezor-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6988db5be258f1aa0def05723411080dc261386d487115e474c4ba25b71d09e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities
A nascent Linux-based botnet named Enemybot has expanded its capabilities to include recently disclosed security vulnerabilities in its arsenal to target web servers, Android devices, and content management systems CMS. "The malware is rapidly adopting one-day vulnerabilities as part of its...
[R3] Nessus Version 10.2.0 Fixes Multiple Vulnerabilities
R3 Nessus Version 10.2.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 05/26/2022 - 09:30 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components zlib, expat, jQuery UI were found to contain vulnerabilities, and updated versions hav...
Magento 2 Community Edition RCE via Unsafe File Upload
Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components...
Centreon Sensitive Data Exposure
In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components...