974 matches found
Unauthorized Access Vulnerability in Goodbody Knowledge Android APP of Tongfang Co.
Good Body Knowledge Android App is a software to detect the health data in your body. There is an override access vulnerability in the Good Body Knowledge Android APP of Tongfang Co. The attacker registers and logs into the system while grabbing packets and modifying the user ID to query any user...
Arbitrary Account Password Reset Vulnerability in Goodbody Knowledge Android APP of Tongfang Co.
Good Body Knowledge Android App is a software to detect the health data in your body. An arbitrary account password reset vulnerability exists in the Good Body Knowledge Android APP of Tongfang Co. An attacker can reset any account password by grabbing a packet to obtain a verification code throu...
good-practices.edb.hkedcity.net Open Redirect vulnerability
Vulnerable URL: http://good-practices.edb.hkedcity.net/exemplar9/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Ran...
CVE-2015-9232
The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a...
Authentication flaw
The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a...
CVE-2015-9232
The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a...
CVE-2015-9232
The CVE-2015-9232 entry affects the Good for Enterprise Android app (version 3.0.0.415). The underlying issues are: (1) Authentication Delegation API intent does not use signature protection, and (2) the Good Dynamic activation process does not detect malicious activation attempts involving modif...
EulerOS 2.0 SP1 : gstreamer (EulerOS-SA-2017-1205)
According to the versions of the gstreamer packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An...
Docutek Solutions Good for Enterprise for Android Cross-Site Scripting Vulnerability
Docutek Solutions Good for Enterprise for Android is a mobile coworking application from Docutek Solutions for the Android platform. The program supports features such as email, calendar and contacts. A cross-site scripting vulnerability exists in versions 2.8.0.398 and 1.9.0.40 of Docutek...
CVE-2014-4925
Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...
Cross site scripting
Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...
CVE-2014-4925
The CVE-2014-4925 entry concerns Good for Enterprise for Android (versions 2.8.0.398 and 1.9.0.40) with a cross-site scripting/HTML-injection flaw in emails. Public disclosures describe a crafted HTML payload (notably a meta refresh) that can redirect users to a malicious URL when opening a messa...
CVE-2014-4925
Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...
gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a
The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...
gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...
gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples
The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...
gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt
The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...
Virtuozzo 7 : gstreamer1-plugins-good (VZLSA-2017-0020)
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Virtuozzo 7 : gstreamer-plugins-good / etc (VZLSA-2017-0019)
An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
July 7, 2017 – Morning Cyber Coffee Headlines – “Spiderman” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 7, 2017 - Headlines Carbon Black in the News: Residents of these states ar...