1932 matches found
Admins Urged to Patch Critical F5 Flaw Under Active Attack
Security experts are urging companies to deploy an urgent patch for a critical vulnerability in F5 Networks’ networking devices, which is being actively exploited by attackers to scrape credentials, launch malware and more. Last week, F5 Networks issued urgent patches for the critical remote...
A New Ransomware Targeting Apple macOS Users Through Pirated Apps
Cybersecurity researchers this week discovered a new type of ransomware targeting macOS users that spreads via pirated apps. According to several independent reports from K7 Lab malware researcher Dinesh Devadoss, Patrick Wardle, and Malwarebytes, the ransomware variant — dubbed "EvilQuest" — is...
Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session
Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session, comparing toCitrix Workspace app 1912 for Windows. In a Fiddler trace captured during session launch, you will see wfica32 attempting to connect tolocus.analytics.cloud.com:443 but failing...
Design/Logic Flaw
IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...
Savant Web Server Denial of Service Vulnerability
Savant Web Server is a WEB server. A denial of service vulnerability exists in Savant Web Server. An attacker can exploit the vulnerability to launch a denial of service attack...
CVE-2020-13651
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client...
MDX managed apps cannot open links properly so that apps which are not managed launch automatically
Problem description: MDX app policies are configured but the app that is not managed does not launch automatically as expected. Example use case: iOS has the Booking.com app installed from the Public App Store. The device also has Secure Web and Secure Mail installed. The Secure apps are managed ...
CVE-2020-9801
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...
Code injection
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...
CVE-2020-9801
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...
CVE-2020-9801
CVE-2020-9801 (Safari) describes a logic issue in Safari fixed in Safari 13.1.1. A malicious process could cause Safari to launch an application. Affected component is Safari’s WebKit on macOS (local attack vector with low/moderate impact per CVSS). The public records consistently state the fix i...
CVE-2020-9801
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...
CVE-2020-9801: Undefined Security Weakness
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application...
Games Don't Do Enough to Combat Toxicity at Launch
Riot Games has cutting-edge moderation tools at its disposal. Few of them are present in Valorant, which launched this week...
Unspecified Vulnerability in Apple Safari (CNVD-2020-52146)
Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 13.1.1, which can be exploited by an attacker with the help of a malicious process to cause Safari to...
PT-2020-20770
Name of the Vulnerable Software and Affected Versions Safari versions prior to 13.1.1 Description A logic issue was addressed with improved restrictions, which may allow a malicious process to cause Safari to launch an application. Recommendations For versions prior to 13.1.1, update to Safari...
Race condition
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user...
CVE-2020-12693
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user...
UBUNTU-CVE-2020-12693
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user...
