1743 matches found
CVE-2023-40541
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...
CVE-2023-40541
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent...
CVE-2023-40541
CVE-2023-40541 concerns macOS Shortcuts where a shortcut could output sensitive user data without consent. The vulnerability is fixed in macOS Sonoma 14, addressed by adding an additional user-consent prompt. Connected sources consistently describe the issue as a permissions/consent gap rather th...
PT-2023-27503 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent. Recommendations: For versions prior to 14,...
Apple macOS Security Breach
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from a shortcut that may export sensitive user data without consent...
CVE-2023-41948
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...
CVE-2023-41948
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...
CVE-2023-41948
CVE-2023-41948 refers to a Stored XSS vulnerability in the WordPress plugin Cookie Notice & Consent, affecting versions
CVE-2023-41948 WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...
CVE-2023-41948 WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...
PT-2023-28186 · Christoph Rado · Christoph Rado Cookie Notice & Consent Plugin
Name of the Vulnerable Software and Affected Versions: Christoph Rado Cookie Notice & Consent plugin versions prior to 1.7.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For...
CVE-2023-42468
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...
Design/Logic Flaw
The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...
Color Phone Security Vulnerability
Color Phone is a dialer with the ability to change themes. A security vulnerability exists in Color Phone version 2.1.8-2 and earlier, which originated from a vulnerability that allows remote attackers to initiate a phone call without the user's consent...
CVE-2023-41775
Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent...
Improper access control
Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent...
CVE-2023-41775
Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent...
"direct" Desktop App for macOS fails to restrict access permissions
Overview "direct" Desktop App for macOS provided by L is B Corp. fails to restrict access permissions CWE-284. The access control mechanism provided by macOS "TCC Transparency Consent and Control" may be bypassed. Koh M. Nakagawa of FFRI Security, Inc. reported this vulnerability to IPA. JPCERT/C...
WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)
Software UniConsent Cookie Consent CMP for GDPR / CCPA Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41800 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2b359ed28a55...