Lucene search
+L

1678 matches found

CNVD
CNVD
added 2021/01/18 12:0 a.m.7 views

Apple macOS Big Sur has an unspecified vulnerability

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.0.1, which can be exploited by an attacker to allow a malicious application to bypass the Privacy preference...

5.5CVSS6.3AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/15 10:15 p.m.13 views

CVE-2020-25533

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...

7CVSS6.7AI score0.00251EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/01/15 9:55 p.m.21 views

CVE-2020-25533

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...

6.7AI score0.00251EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/01/07 4:32 p.m.23 views

Session Fixation

firefox is vulnerable to session fixation. Firefox for Android allows a malicious application to broadcast a user's Intent with arbitrary headers, allowing attacks such as session fixation...

6.5CVSS4.1AI score0.00858EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2021/01/07 2:15 p.m.21 views

Session fixation

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

4.3CVSS6.1AI score0.00858EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/01/07 1:52 p.m.51 views

CVE-2020-26975

When a malicious application installed on the user's device broadcast an Intent to Firefox for Android, arbitrary headers could have been specified, leading to attacks such as abusing ambient authority or session fixation. This was resolved by only allowing certain safe-listed headers. Note: This...

6.5CVSS8.3AI score0.00858EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/01/05 12:0 a.m.12 views

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android OS that could lead to a local elevation of privilege, allowing a malicious application to gain privileges...

7.8CVSS6.7AI score0.00167EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
added 2020/12/20 12:0 a.m.3 views

SolarWinds SUPERNOVA .NET Webshell Traffic

SolarWinds SUPERNOVA .NET Webshell is a malicious application that allows remote attackers to gain access to an affected system...

6.1AI score
SaveExploits0
Huawei
Huawei
added 2020/12/16 12:0 a.m.25 views

Security Advisory - Resource Management Errors Vulnerability in Huawei Smartphone Product

There is a resource management errors vulnerability in Huawei smartphone product. Local attackers construct malicious application files, causing system applications to run abnormally. Vulnerability ID: HWPSIRT-2020-06020 This vulnerability has been assigned a Common Vulnerabilities and Exposures...

5.5CVSS5.3AI score0.00187EPSS
SaveExploits0Affected Software1
Apple
Apple
added 2020/12/15 5:56 a.m.77 views

About the security content of tvOS 14.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS0.8AI score0.03207EPSS
SaveExploits0Affected Software1
Check Point Advisories
Check Point Advisories
added 2020/12/15 12:0 a.m.2 views

Sunburst Backdoor Suspicious Traffic

Sunburst Backdoor Trojan is a malicious application that allows remote attackers to gain access to an affected system...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.8 views

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS where a malicious application may be able to execute arbitrary code with system privileges. The following products and versions are affected: macOS Mojave 10.14....

9.3CVSS7.3AI score0.01101EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.9 views

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS where a malicious application may be able to execute arbitrary code with system privileges. The following products and versions are affected: macOS Mojave 10.14....

9.3CVSS7.3AI score0.01101EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.8 views

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.0.1, which can be exploited by an attacker to allow a malicious application to bypass the Privacy preference...

5.5CVSS6.7AI score0.00324EPSS
SaveExploits0References4
NVD
NVD
added 2020/12/08 9:15 p.m.20 views

CVE-2020-27900

An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to preview files it does not have access to...

5.5CVSS4.7AI score0.00943EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/08 9:15 p.m.7 views

CVE-2020-27895

An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs...

3.3CVSS5.8AI score0.00649EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/08 9:15 p.m.29 views

CVE-2020-27895

An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs...

4.3CVSS2.4AI score0.00649EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/08 9:15 p.m.30 views

Information disclosure

An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs...

4.3CVSS3.6AI score0.00649EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/12/08 9:15 p.m.28 views

Memory corruption

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges...

9.3CVSS7.9AI score0.01273EPSS
SaveExploits0References3Affected Software4
Prion
Prion
added 2020/12/08 9:15 p.m.21 views

Code injection

An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to preview files it does not have access to...

4.3CVSS5.2AI score0.00943EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder