CVE-2024-42195

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

CVE-2024-42195

CVE-2024-42195 concerns HCL DevOps Deploy / HCL Launch, where HTML injection in the Web UI could allow embedding arbitrary HTML tags and potentially disclose sensitive information. The connected documents corroborate the vulnerability type (HTML injection) and affected software name, and note tha...

CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure...

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL Corporation, U.S.A. HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your...

SUSE hackweek 跨站脚本漏洞

SUSE hackweek is a tool from SUSE Germany that nurtures hack ideas into projects and then collaborates on them. A cross-site scripting vulnerability exists in SUSE hackweek that stems from a lack of input cleanup and allows any user to launch a stored cross-site scripting attack...

SUSE CVE-2024-11700

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox 133 and Thunderbird 133...

gnome-shell: code execution in portal helper

A vulnerability was found in GNOME Shell. A portal helper can be launched automatically without user confirmation based on the network responses provided by an adversary...

gnome-shell: code execution in portal helper

A vulnerability was found in GNOME Shell. A portal helper can be launched automatically without user confirmation based on the network responses provided by an adversary...

PT-2024-10231

Name of the Vulnerable Software and Affected Versions MacOS affected versions not specified Description The issue is related to a synchronization error in the Launch Services interface of MacOS operating systems, which is a "race condition" scenario. This could allow an attacker to bypass the...

CVE-2024-10195 Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injection

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goformgetcmdprocess of the component SMS Check. The manipulation of the argument orderby leads to sql injection...

CVE-2024-10018

Improper permission control in the mobile application com.transsion.aivoiceassistant can lead to the launch of any unexported component...

CVE-2024-10018

CVE-2024-10018 affects the mobile app com.transsion.aivoiceassistant from TECNO/Transsion. The root cause is described as improper permission control, which can allow launching of any unexported component within the app. According to the cited sources, this can lead to high-impact outcomes affect...

Citrix Virtual Apps and Desktops: Session Launch Issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with session launch in Citrix Virtual Apps and Desktops. Overview of the Issue The process of session launch in Citrix Virtual Apps and Desktops is depende...

CVE-2024-38425

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425

Technical details about CVE-2024-38425 are not publicly available in the provided documents. The descriptions mention information disclosure via implicit app-launch broadcasts but do not specify affected products, versions, vectors, or fixes. Monitor for updates.

CVE-2024-38425 Improper Authorization in Performance

Information disclosure while sending implicit broadcast containing APP launch information...

CVE-2024-38425 Improper Authorization in Performance

Information disclosure while sending implicit broadcast containing APP launch information...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an information disclosure when sending an implicit broadcast containing app launch information...

PT-2024-27996 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure when sending an implicit broadcast that contains app launch details. This implies a potential leak of sensitiv...