Elastic Elasticsearch Installed (Linux)

Binary data elasticelasticsearchnixinstalled.nbin...

The vulnerability of the KR C4 production automation control system and the operating system KSS, related to the use of pre-installed account data, allows a perpetrator to gain full access to the vulnerable system.

The vulnerability of the KR C4 production automation control system and the KSS operating system is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the vulnerable systems...

The vulnerability of the KR C4 production automation control system and the operating system KSS, related to the use of pre-installed account data, allows a perpetrator to gain full access to the system.

The vulnerability of the KR C4 production automation control system and the KSS operating system is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the system...

OS Command Injection in zacanger/is-program-installed

✍️ Description There is "OS Command Injection" vulnerability on "is-program-installed" npm package. This package tries to understand the given parameter name program or binary name is installed in the computer or not. However, since this package does not properly control the characters in the...

Microsoft Visual Studio Code Extensions Installed (macOS)

Binary data macosmicrosoftvisualstudiocodeextensionsinstalled.nbin...

The vulnerability of the Vijeo Designer Basic and Vijeo Designer software, related to the use of pre-installed credentials, allows a perpetrator to gain unauthorized access to protected information.

It is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2021-30988

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed...

CVE-2021-30988

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed...

Design/Logic Flaw

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed...

Custom WhatsApp Build Delivers Triada Malware

Triada malware, both pernicious and persistent, has resurfaced. Its most recent sighting is buried inside an advertising component of a modified version of the popular WhatsApp messenger called FM WhatsApp. The malware, first spotted by researchers at Kaspersky in 2016, is a type of mobile...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS that could allow a malicious application to recognize...

PT-2021-19026 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.2 iPadOS versions prior to 15.2 Description: A permissions issue was addressed with improved validation, allowing a malicious application to potentially identify what other applications a user has installed...

Design/Logic Flaw

In SapphireIMS 40971, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference IDOR in the local user creation function...

The vulnerability of Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform allows a attacker to cause a service failure or gain access to protected information.

The vulnerability of the Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to sensitive information...

Cybereason Endpoint Agent Installed (Windows)

Binary data cybereasonendpointagentwininstalled.nbin...

The vulnerability of the command-line interface (CLI) of the FortiAuthenticator system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of the FortiAuthenticator system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

The vulnerability of the Telnet service of the Wi-Fi camera software developed by Rubetek, models RV-3406, RV-3409, and RV-3411, allows a intruder to gain full control over the device.

The vulnerability of the telnet service provided by the microprogrammed Wi-Fi cameras from Rubetek, models RV-3406, RV-3409, and RV-3411, is related to the use of pre-installed registration data. Exploiting this vulnerability can allow a remote attacker to gain full control over the device...

openSUSE 15 Security Update : opera (openSUSE-SU-2021:0949-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0949-1 advisory. - Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a...

Microsoft Visual Studio Installed (macOS)

Binary data visualstudiomacinstalled.nbin...

SUSE: Security Advisory (SUSE-SU-2018:3815-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...