41638 matches found
Logic Flaw Vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform
Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A logic flaw vulnerability exists in Byzoro's Smart Multi-service Security Gateway Intelligent Management Platform. Attackers...
The vulnerability of the Mobile Expenses component of the Oracle Internet Expenses financial management application allows a malicious user to gain access to update, modify, or delete data.
The vulnerability of the Mobile Expenses component of the Oracle Internet Expenses financial management application relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to gain access to update, modify, or delete data using the HTTP protocol...
Utilities ‘Concerningly’ at Risk from Active Exploits
The amount of time that utility networks spend exposed to a known application exploit has spiked over the past two months — something analysts called out as a “concerning datapoint,” and an important reminder that ransomware isn’t the only threat utility networks need to secure against. A new...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: Ill be part of a European Internet Forum virtual debate on June 17, 2021. The topic is "Decrypting the encryption debate: How to ensure public safety with a privacy-preserving and secure Internet?" I’m speaking at the all-online...
Logic Flaw Vulnerability in Tengyi Sky Firewall v2
TengYi Network is an Internet service provider specializing in providing domestic and international anti-attack protection. A logic flaw vulnerability exists in Tengyi Sky Firewall v2, which can be exploited by attackers to obtain sensitive information...
CVE-2021-25418
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
CVE-2021-25419
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
CVE-2021-25418
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
CVE-2021-25419
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
CVE-2021-25400
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
CVE-2021-25400
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
Design/Logic Flaw
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
CVE-2021-25419
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
CVE-2021-25400
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
Information disclosure
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action...
Code injection
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...
CVE-2021-25418
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition...
CVE-2021-25400
CVE-2021-25400 affects Samsung Internet prior to 14.0.1.20. The vulnerability is described as an intent redirection that could let an attacker execute a privileged action. Public technical details in connected sources are limited to the affected product and the version before the patch; exploitat...
