Lucene search
+L

6655 matches found

Apple
Apple
added 2020/12/15 5:58 a.m.103 views

About the security content of tvOS 13.4.8 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

10CVSS0.4AI score0.0779EPSS
SaveExploits15Affected Software1
OSV
OSV
added 2020/12/14 10:15 p.m.13 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.2AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/14 10:15 p.m.28 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.2AI score0.0015EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/14 10:15 p.m.20 views

Authentication flaw

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

2.1CVSS5.8AI score0.0015EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/12/14 10:15 p.m.6 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.6AI score0.0015EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/12/14 9:51 p.m.40 views

CVE-2020-0468

In listen and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5AI score0.0015EPSS
SaveExploits0References1
HackRead
HackRead
added 2020/12/10 8:49 p.m.36 views

Apple, Google to ban X-Mode’s location tracking apps from stores

By Deeba Ahmed The decision came after a media outlet reported about data gathering tactics of location data collection firm X-Mode Social. Find out why. This is a post from HackRead.com Read the original post: Apple, Google to ban X-Modes location tracking apps from stores...

2.3AI score
SaveExploits0
Kitploit
Kitploit
added 2020/12/10 11:30 a.m.74 views

DarkSide - Tool Information Gathering And Social Engineering

Features: Hacker Dashboard Hacker News thehackernews.com/ New Exploits Exploit-db.com Hacking Tutorials Video youtube.com The Latest Prices OF Digital Currencies Rials , Usd Information Gathering Bypass Cloud Flare Cms Detect Trace Toute Reverse IP Port Scan IP location Finder Show HTTP Header Fi...

7.4AI score
SaveExploits0References1
OSV
OSV
added 2020/12/09 1:15 a.m.9 views

CVE-2020-26963

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox 83...

4.3CVSS6.9AI score0.0085EPSS
SaveExploits0References2
NVD
NVD
added 2020/12/09 1:15 a.m.18 views

CVE-2020-26963

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox 83...

4.3CVSS3.9AI score0.0085EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/12/09 12:24 a.m.30 views

CVE-2020-26963

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox 83...

5.6AI score0.0085EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2020/12/09 12:24 a.m.54 views

CVE-2020-26963

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox 83...

4.3CVSS7.3AI score0.0085EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2020/12/09 12:24 a.m.98 views

CVE-2020-26963

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox 83...

4.3CVSS5.8AI score0.0085EPSS
SaveExploits0
CNVD
CNVD
added 2020/12/09 12:00 a.m.15 views

Unspecified Vulnerability in Schneider Electric Easergy T300

Easergy T300 is a new generation intelligent terminal for distribution network automation, which is designed with the concept of "Modularity, Flexibility, and Application Oriented", and can be widely used in medium voltage distribution network management, fault location, isolation, and restoratio...

7.5CVSS6.7AI score0.00506EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:00 a.m.55 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : httpd Multiple Vulnerabilities (NS-SA-2020-0066)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has httpd packages installed that are affected by multiple vulnerabilities: - A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is...

7.5CVSS6.4AI score0.20156EPSS
SaveExploits0References4
OSV
OSV
added 2020/12/07 12:00 p.m.17 views

RUSTSEC-2020-0085 crate has been renamed to `sn_node`

This crate has been renamed from safevault to snnode. The new repository location is:...

7.1AI score
SaveExploits0References3
OSV
OSV
added 2020/12/07 12:00 p.m.19 views

RUSTSEC-2020-0086 crate has been renamed to `sn_client`

This crate has been renamed from safecore to snclient. The new repository location is:...

7.1AI score
SaveExploits0References3
RustSec
RustSec
added 2020/12/07 12:00 p.m.17 views

crate has been superseded by `sn_client`

This crate has been superseded by snclient. The new repository location is:...

0.3AI score
SaveExploits0
HackRead
HackRead
added 2020/12/07 3:25 a.m.46 views

Norweigian researcher exposes how a US firm collected his location data

By Sudais Asif The researcher identified over 75000 data points of his phone being tracked. Here's how he found and exposed the firm behind the scenes. This is a post from HackRead.com Read the original post: Norweigian researcher exposes how a US firm collected his location data...

1.8AI score
SaveExploits0
CNVD
CNVD
added 2020/12/02 12:00 a.m.11 views

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73322)

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to inject arbitrary web script or HTML via a "location name"...

5.4CVSS5.9AI score0.01174EPSS
SaveExploits1References1
Rows per page
Query Builder