20589 matches found
PT-2022-23395 · H3C · H3C B5 Mini
Name of the Vulnerable Software and Affected Versions: H3C B5 Mini version B5MiniV100R005 Description: A stack overflow issue was discovered via the function SetMobileAPInfoById. This issue affects the H3C B5 Mini device. Recommendations: For H3C B5 Mini version B5MiniV100R005, consider disabling...
H3C B5 Mini 缓冲区错误漏洞
The H3C B5 Mini is a full gigabit wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C B5 Mini B5MiniV100R005 version that stems from a stack overflow in the SetMobileAPInfoById method...
PT-2022-6213 · Ibm · Ibm Navigator Mobile
Name of the Vulnerable Software and Affected Versions: IBM Navigator Mobile Android versions 3.4.1.1 through 3.4.1.2 Description: The issue is related to improper access control, which could allow a local user to obtain sensitive information. This is due to errors in authorization. Recommendation...
iOS Can Stop VPNs From Working as Expected—and Expose Your Data
A security researcher claims that Apple mobile devices keep connections open if they are created before a VPN is activated...
Information disclosure
Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-29507
Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-29507
The CVE CVE-2022-29507 affects the Intel® Team Blue mobile application (all versions). The root cause is insufficient protection of credentials, potentially allowing an authenticated user to disclose information via local access. The issue is documented with a low CVSS base score (3.3/Low) and in...
The vulnerability of the MiUI mobile operating system in devices like Redmi Note 11 and Redmi Note 9T, related to writing beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the mobile operating system MIUI is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Intel Datacenter Group Event 安全漏洞
Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in the Intel Datacenter Group Event iOS application. An attacker could exploit the vulnerability to obtain sensitive information...
The Android 13 Privacy Settings You Should Update Now
Google’s new mobile operating system has arrived. Take back some control with these privacy and security tips...
Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
The plugin does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability. Export events with malicious CSV: 1. Create and save a new Enquiry source and add the following in the name field...
WordPress Mobile Events Manager Plugin <= 1.4.7 - Authenticated CSV Injection vulnerability
Authenticated CSV Injection vulnerability discovered by Varun thorat in Mobile Events Manager versions = 1.4.7 Solution Update the WordPress Mobile Events Manager plugin to the latest available version at least 1.4.8...
IT threat evolution in Q2 2022. Mobile statistics
IT threat evolution in Q2 2022 IT threat evolution in Q2 2022. Non-mobile statistics IT threat evolution in Q2 2022. Mobile statistics These statistics are based on detection verdicts of Kaspersky products received from users who consented to providing statistical data. Quarterly figures Accordin...
It’s Time to Protect Every SIM
Ensuring the security of billions of mobile devices is a priority. Learn how Akamai aims to protect and secure every SIM as we continually adapt to new threats...
Intel Team Blue 安全漏洞
Intel Team Blue is a mobile application from Intel Corporation. Intel Team Blue has a security vulnerability that stems from insufficient credential protection, which can be exploited by an attacker to obtain sensitive information...
The vulnerability of the implementation of automatic login for mobile devices in the virtual training environment Moodle allows a hacker to carry out a phishing attack and expose the protected information.
The vulnerability of the automatic login function in the Moodle virtual training system for mobile devices is related to improper cleaning of user data. Exploiting this vulnerability allows a malicious actor to carry out a phishing attack and disclose sensitive information through a specially...
Twilio breached after social engineering attack on employees
Cloud-based communication platform provider Twilio has announced a breach via a social engineering attack on employees. On August 4, 2022, Twilio says it became aware of unauthorized access to information related to a limited number of Twilio customer accounts, through the social engineering atta...
SAP Authenticator 信息泄露漏洞
SAP Authenticator is a mobile application from SAP Germany that generates passwords for systems that require one-time password authentication. SAP Authenticator suffers from an information disclosure vulnerability. No information about this vulnerability is available at this time, so please stay...
Execution Unit Scheduler Contention Side-Channel Vulnerability on AMD Processors
Bulletin ID: AMD-SB-1039 Potential Impact: Information Disclosure Severity: Medium Summary Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2”, “Zen 3” and “Zen 4” that use simultaneous multithreading SMT. By...