18 matches found
webkitgtk: An app may be able to access sensitive user data
A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...
webkitgtk: An app may be able to access sensitive user data
A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...
webkitgtk: An app may be able to access sensitive user data
A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...
webkitgtk: An app may be able to access sensitive user data
A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...
CVE-2024-37526
IBM Watson Query on Cloud Pak for Data IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0 could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism...
CVE-2024-37526
IBM Watson Query on Cloud Pak for Data IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0 could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism...
CVE-2024-37526: Exposure of Sensitive System Information to an Unauthorized Control Sphere
IBM Watson Query on Cloud Pak for Data IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0 could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism...
Baxter Life2000 Ventilation System
RISK EVALUATION Successful exploitation of these vulnerabilities could lead to information disclosure and/or disruption of the device's function without detection. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying...
Security Bulletin: IBM Watson Query on IBM Cloud does not govern all of the columns of a published object
Summary IBM Watson Query on IBM Cloud integrates with IBM Knowledge Catalog IKC - formerly Watson Knowledge Catalog WKC - to enforce data protection rules on governed objects. When you publish objects from Watson Query to catalogs or projects, only the first 100 columns are registered in the...
PT-2012-1948
Name of the Vulnerable Software and Affected Versions Voxofon com.voxofon versions prior to 2.5.2 Description The issue allows remote attackers to read or modify SMS information via a crafted application, due to improper data protection. Recommendations For versions prior to 2.5.2, update to...
PT-2012-1952
Name of the Vulnerable Software and Affected Versions Scan to PDF Free version 2.0.4 Description The issue allows remote attackers to read or modify scanned files and a Google account via a crafted application, due to improper data protection. Recommendations For version 2.0.4, at the moment, the...
PT-2012-1950
Name of the Vulnerable Software and Affected Versions 360 MobileSafe versions 2.0 through 2.2 Description The issue allows remote attackers to read or modify SMS messages and a contact list via a crafted application, due to improper data protection. Recommendations For versions 2.0 through 2.2,...
PT-2012-1951
Name of the Vulnerable Software and Affected Versions QIWI Wallet versions prior to 1.14.2 Description The issue allows remote attackers to read or modify financial information via a crafted application due to improper data protection. Recommendations For versions prior to 1.14.2, update to versi...
PT-2012-1968
Name of the Vulnerable Software and Affected Versions Tencent QQPimSecure version 3.0.2 Description The issue concerns improper data protection, allowing remote attackers to access and modify sensitive information, including SMS/MMS messages and contact lists, by using a crafted application...
PT-2012-1954
Name of the Vulnerable Software and Affected Versions AnGuanJia com.anguanjia.safe version 2.10.343 Description The issue allows remote attackers to read or modify SMS messages and a contact list via a crafted application, due to improper data protection. Recommendations For version 2.10.343, at...
PT-2012-1970
Name of the Vulnerable Software and Affected Versions Tencent WBlog version 3.3.1 MicroBlogPad version 1.4.0 Description The issue allows remote attackers to read or modify message drafts and search keywords via a crafted application, due to improper data protection. Recommendations For Tencent...
PT-2012-1943
Name of the Vulnerable Software and Affected Versions Ubermedia Twidroyd Legacy version 4.3.11 Description The issue allows remote attackers to read or modify Twitter information via a crafted application, due to improper data protection. Recommendations For Ubermedia Twidroyd Legacy version...
PT-2012-1947
Name of the Vulnerable Software and Affected Versions Limit My Call com.limited.call.view version 2.11 Description The issue allows remote attackers to read or modify call logs and a contact list via a crafted application, due to improper data protection. Recommendations For version 2.11, at the...