CVE-2022-27549

HCL Launch may store certain data for recurring activities in a plain text format...

CVE-2022-27548

HCL Launch stores user credentials in plain clear text which can be read by a local user...

Cross site scripting

A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/group. The manipulation leads to basic cross site scripting DOM. The attack can be launched remotely. The exploit has been disclos...

Unable to connect to the server. Contact ... with the following error (no error text available)

1: Via Third party proxy, Workspace report error when launching ICA file "Unable to connect to the server. Contact your systemadministator with the following error no error text available". 2: By PassThird party proxy,Workspace launching ICA file is successful...

Cross site scripting

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

Delay in launching Published Desktops for on-demand provisioned MCS VMs on Azure

It takes approximately 1 hour to be fully registered. Once the session launch is initiated, it takes between 5 and 10 minutes to start the VDA. In the boot diagnostics section, the VDA seems stuck at "Applying Computer Settings" as below:...

Launching Issues using Workspace App for iOS Client Devices - Session error 8

iOS Client Devices cannot launch Published App through Workspace App "The operation couldn't be completed - HdxSdkErrorDomainSession error 8 "...

Code injection

Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity...

CVE-2022-30712

Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-30712

Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-30713

Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-30710

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-30710

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-30710

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

Input validation

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android in versions prior to Framework 12L. The vulnerability stems from a privilege bypass with a possible way to launch foreground activities from the background. This could...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (=3.1.0.RELEASE), cloud.altemista.fwk.message:cloud-altemistafwk-core-message-active-conf (>=3.0.0.RELEASE <=3.1.0.RELEASE) +706 more potentially affected by CVE-2012-6092 via org.apache.activemq:activemq-core (>=4.1.1 <=5.7.0)

org.apache.activemq:activemq-core MAVEN version =4.1.1, =3.0.0.RELEASE, =1.0, =1.0.0, =1.0.0, =0.4.2, =0.4.2, =0.4.2, =3.0.0.rc1, =3.0.0.rc1, =3.0.0.rc1, =3.0.0.rc1, =3.2.1 and more Source cves: CVE-2012-6092 Source advisory: OSV:GHSA-RP9P-863F-9C4H...

Microsoft showcases the future of comprehensive security at RSA 2022

The last time the RSA Conference was held as an in-person event was in 2020. Needless to say, a lot has changed since then. RSA is once again going forward as an in-person and digital event in San Francisco, from June 6 to 9, 2022. After two years of remote interactions, we’re excited to exchange...

Apple tvOS 权限许可和访问控制问题漏洞

Apple tvOS is a set of smart TV operating systems from Apple, Inc. A vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452 with privilege permission and access control issues, which stems from a sandbox bypass in LaunchServices. An attacker can exploit this vulnerability to bypa...

GHSA-J472-MCQ2-95P6 OS Command Injection in Jenkins

Jenkins 2.73.1 and earlier, 2.83 and earlier users with permission to create or configure agents in Jenkins could configure a launch method called 'Launch agent via execution of command on master'. This allowed them to run arbitrary shell commands on the master node whenever the agent was suppose...