Lucene search
+L

974 matches found

CNVD
CNVD
added 2017/11/03 12:0 a.m.3 views

Unauthorized Access Vulnerability in Goodbody Knowledge Android APP of Tongfang Co.

Good Body Knowledge Android App is a software to detect the health data in your body. There is an override access vulnerability in the Good Body Knowledge Android APP of Tongfang Co. The attacker registers and logs into the system while grabbing packets and modifying the user ID to query any user...

6.8AI score
Exploits0
CNVD
CNVD
added 2017/11/03 12:0 a.m.6 views

Arbitrary Account Password Reset Vulnerability in Goodbody Knowledge Android APP of Tongfang Co.

Good Body Knowledge Android App is a software to detect the health data in your body. An arbitrary account password reset vulnerability exists in the Good Body Knowledge Android APP of Tongfang Co. An attacker can reset any account password by grabbing a packet to obtain a verification code throu...

7.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/10/06 4:41 a.m.21 views

good-practices.edb.hkedcity.net Open Redirect vulnerability

Vulnerable URL: http://good-practices.edb.hkedcity.net/exemplar9/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Ran...

6.9AI score
Exploits0
NVD
NVD
added 2017/09/20 10:29 p.m.16 views

CVE-2015-9232

The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a...

5.3CVSS5AI score0.00922EPSS
Exploits1References3
Prion
Prion
added 2017/09/20 10:29 p.m.10 views

Authentication flaw

The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a...

2.6CVSS6.8AI score0.00922EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2017/09/20 10:0 p.m.21 views

CVE-2015-9232

The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a...

5AI score0.00922EPSS
Exploits1References3
CVE
CVE
added 2017/09/20 10:0 p.m.39 views

CVE-2015-9232

The CVE-2015-9232 entry affects the Good for Enterprise Android app (version 3.0.0.415). The underlying issues are: (1) Authentication Delegation API intent does not use signature protection, and (2) the Good Dynamic activation process does not detect malicious activation attempts involving modif...

5.3CVSS4.9AI score0.00922EPSS
Exploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/09/11 12:0 a.m.35 views

EulerOS 2.0 SP1 : gstreamer (EulerOS-SA-2017-1205)

According to the versions of the gstreamer packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An...

7.5CVSS6.6AI score0.04717EPSS
Exploits0References16
CNVD
CNVD
added 2017/08/30 12:0 a.m.3 views

Docutek Solutions Good for Enterprise for Android Cross-Site Scripting Vulnerability

Docutek Solutions Good for Enterprise for Android is a mobile coworking application from Docutek Solutions for the Android platform. The program supports features such as email, calendar and contacts. A cross-site scripting vulnerability exists in versions 2.8.0.398 and 1.9.0.40 of Docutek...

6.1CVSS6AI score0.01113EPSS
Exploits1References1
NVD
NVD
added 2017/08/28 3:29 p.m.9 views

CVE-2014-4925

Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...

6.1CVSS6.1AI score0.01113EPSS
Exploits1References3
Prion
Prion
added 2017/08/28 3:29 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...

4.3CVSS6.3AI score0.01113EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2017/08/28 3:0 p.m.53 views

CVE-2014-4925

The CVE-2014-4925 entry concerns Good for Enterprise for Android (versions 2.8.0.398 and 1.9.0.40) with a cross-site scripting/HTML-injection flaw in emails. Public disclosures describe a crafted HTML payload (notably a meta refresh) that can redirect users to a malicious URL when opening a messa...

6.1CVSS6AI score0.01113EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2017/08/28 3:0 p.m.17 views

CVE-2014-4925

Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...

6.1AI score0.01113EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2017/08/01 3:34 p.m.6 views

gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

5.5CVSS5.9AI score0.02391EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 3:34 p.m.6 views

gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

5.5CVSS7.4AI score0.02668EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 3:34 p.m.19 views

gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

7.5CVSS7.4AI score0.04717EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/08/01 3:34 p.m.8 views

gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...

7.5CVSS5.9AI score0.0382EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2017/07/13 12:0 a.m.32 views

Virtuozzo 7 : gstreamer1-plugins-good (VZLSA-2017-0020)

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.1AI score0.09267EPSS
Exploits4References7
Tenable Nessus
Tenable Nessus
added 2017/07/13 12:0 a.m.31 views

Virtuozzo 7 : gstreamer-plugins-good / etc (VZLSA-2017-0019)

An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.1AI score0.09267EPSS
Exploits4References7
Carbon Black Blog
Carbon Black Blog
added 2017/07/07 12:42 p.m.52 views

July 7, 2017 – Morning Cyber Coffee Headlines – “Spiderman” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 7, 2017 - Headlines Carbon Black in the News: Residents of these states ar...

6.7AI score
Exploits0
Rows per page
Query Builder