12340 matches found
F-Secure Safe security vulnerabilities
F-secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure. A security vulnerability exists in F-secure Safe Browser that stems from a flaw in the product implementation. When a user clicks on a malicious link, the browser address bar displays a legitimate...
AZL-6837 CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3
An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files...
WordPress Border Loading Bar plugin <= 1.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress Border Loading Bar plugin versions = 1.0.1. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...
Qt QLibrary security vulnerabilities
Qt QLibrary is a code framework and QLibrary is one of his libraries. A security vulnerability exists in Qt QLibrary versions prior to 5.14.1 and prior to 5.12.7, which stems from QLibrary attempting to load a plugin relative to a working directory...
microcode_ctl security, bug fix and enhancement update
2:2.1-73.11.0.1 - for Intel, do not trigger load if on-disk microcode is not an update Orabug: 30634727 - set earlymicrocode='no' in virtualized guests to avoid early load bugs Orabug: 30618736 - ensure late loading fixes are present on 4.1.12- and 4.14.35- - enable early and late load for 5.4.17...
PT-2021-11070 · Qt Company +1 · Qt +1
Name of the Vulnerable Software and Affected Versions: Qt versions 5.12.7 and 5.14.1 Description: An issue has been fixed where QLibrary attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files. Recommendations: For Qt version...
CVE-2021-36770
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...
Qt QLibrary security vulnerabilities
Qt QLibrary is a code framework and QLibrary is one of his libraries. A security vulnerability exists in Qt QLibrary versions prior to 5.14.0, which stems from QPluginLoader attempting to load a plugin relative to the working directory...
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
CVE-2021-25446
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
Improper access control
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...
CVE-2021-25446
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
Design/Logic Flaw
Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. Exploiting the vulnerability requires the user to click on a specially crafted, seemingly legitimate URL containing an embedded...
CVE-2021-25448
CVE-2021-25448 affects Samsung Smart Touch Call prior to version 1.0.0.5, due to an improper access control vulnerability in the webview component that allows loading arbitrary web pages. Affected software is specified as Smart Touch Call (prior to 1.0.0.5); Root cause is improper access control ...
CVE-2021-25448
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview...
CVE-2021-25446
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...
CVE-2021-25446: Improper Access Control
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview...