20553 matches found
CVE-2024-52414 WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu wdes-responsive-mobile-menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through = 5.3.18...
CVE-2024-52414 WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through 5.3.18...
CVE-2024-11206
Unauthorized access vulnerability in the mobile application com.transsion.phoenix can lead to the leakage of user information...
CVE-2024-11206
CVE-2024-11206 describes an unauthorized access vulnerability in the mobile app com.transsion.phoenix (used on TECNO devices) that can lead to leakage of user information. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (HIGH). The reports do not specify the e...
CVE-2024-11206
Unauthorized access vulnerability in the mobile application com.transsion.phoenix can lead to the leakage of user information...
CVE-2024-11206
Unauthorized access vulnerability in the mobile application com.transsion.phoenix can lead to the leakage of user information...
SUSE CVE-2024-11115
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. Chromium security severity: Medium...
PT-2024-16823 · Transsion · Com.Transsion.Phoenix
Name of the Vulnerable Software and Affected Versions: com.transsion.phoenix affected versions not specified Description: There is an unauthorized access vulnerability in the mobile application com.transsion.phoenix, which can lead to the leakage of user information. The issue affects TECNO devic...
Mapping License Plate Scanners in the US
DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile scanners on cars are not mapped...
WordPress WDES Responsive Mobile Menu Plugin <= 5.3.18 is vulnerable to PHP Object Injection
Software WDES Responsive Mobile Menu Type Plugin Vulnerable versions = 5.3.18 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52414 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 3807cf50f771 Credits Mika Required privilege...
Ivanti Avalanche 安全漏洞
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...
Ivanti Avalanche 安全漏洞
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...
Ivanti Avalanche 安全漏洞
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...
Ivanti Avalanche 安全漏洞
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability previously existed in Ivanti Avalanche version 6.4.6, which stemmed from the inclusion of ...
Exploit for Missing Authentication for Critical Function in Stacksmarket Stacks_Mobile_App_Builder
CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - Authent...
WordPress Mobile Kiosk plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Mobile Kiosk versions = 1.3.0...
WordPress Mobile Kiosk Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Mobile Kiosk Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51829 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7924bf5d9424 Credits SOPROBRO Required privilege Contributor...
CVE-2020-11921
An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...
CVE-2020-11921
An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...
CVE-2020-11921
CVE-2020-11921 affects Lush 2 (through 2020-02-25). The issue is the lack of Bluetooth traffic encryption, enabling an attacker to hijack an ongoing Bluetooth connection with a mobile phone and gain full control over the device. The CVSSv3.1 base score is 8.8 (HIGH). Remediation: update Lush 2 to...