Design/Logic Flaw

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler e.g., video, audio, and notifications...

CVE-2018-21265

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler e.g., video, audio, and notifications...

gurusoft.no Cross Site Scripting vulnerability OBB-1191815

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Apple iOS and Apple iPadOS Notifications Component Information Disclosure Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. notifications is one of the notification push components. An information disclosure vulnerability exists in the...

CVE-2020-9848

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

PT-2020-20803 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 Description: An authorization issue was addressed with improved state management, allowing a person with physical access to an iOS device to potentially view notification contents from...

CVE-2020-13838

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

CVE-2020-13838

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 June 2020...

CVE-2020-13838

CVE-2020-13838 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the DeX Lockscreen fails to block access to the Quick Panel and notifications. The issue is documented across multiple sources (NVD entry and Red Hat advisory) without details on a concrete exploit vector o...

Unspecified vulnerability in Google Chrome notifications

Google Chrome is a web browser by Google, Inc. notifications is one of the notification components. A security vulnerability in notifications in versions of Google Chrome prior to 74.0.3729.108 exists because the program fails to fully enforce policies, which can be exploited by remote attackers ...

CVE-2020-6504

Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a crafted HTML page...

Product, API & Library Notifications Move to Notifications.qualys.com

Qualys has consolidated notifications of new product features, API changes, and policy library updates at Qualys Notifications to make it easier for our customers to track these changes in one place. Now you will find important notifications such as the latest new Qualys Cloud Platform app...

Password Changing After a Breach

This study shows that most people don't change their passwords after a breach, and if they do they change it to a weaker password. Abstract: To protect against misuse of passwords compromised in a breach, consumers should promptly change affected passwords and any similar passwords on other...

syswork.at Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1171181 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-0109

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2020-0109

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2020-0109

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

evolution security and bug fix update

evolution 3.28.5-12 - Add patch for RH bug 1778799 New Mail account wizard ignores email address change 3.28.5-11 - Update patch for RH bug 1764563 CVE-2018-15587: Reposition signature bar 3.28.5-10 - Add patch for RH bug 1764563 CVE-2018-15587: Reposition signature bar - Add patch for RH bug...

Cross-Site Scripting (XSS)

syncope-client-enduser is vulnerable to cross-site scripting XSS. Lack of sanitization in enduser notifications allow a remote attacker to inject and execute abitrary Javascript in a user's browser via the successMessage...