13106 matches found
Sharing Netflix, Disney+, other passwords is illegal, according to new guidance
The Intellectual Property Office IPO, the UK government body overseeing intellectual property rights in the UK, has quietly released new guidance on piracy and online counterfeit goods. This campaign is a joint effort between IPO and Meta, Facebooks parent company. The general issue on piracy is...
The vulnerability of the SAE implementation for secure Wi-Fi access control software, WPA Supplicant, arises from information disclosure due to incompatibility. This allows attackers to expose the protected information.
The vulnerability of the SAE implementation for the Wi-Fi Protected Access Point’s WPA Supplicant is related to the disclosure of information due to incompatibility. This vulnerability allows a malicious actor to disclose the protected information remotely...
ROS-20221222-01
A vulnerability in the audinsendopen function of the xrdp server is related to the possibility of a stacked buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a remote machine Vulnerability in devredirprocclientdevlistannouncereq function ...
Duplicate Advisory: Apiman has insufficient checks for read permissions
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-j94p-hv25-rm5g. This link is maintained to preserve external references. Original Description Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. A...
Design/Logic Flaw
A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. The attack can be initiated remotely. The exploit has be...
CVE-2022-4612 Click Studios Passwordstate insufficiently protected credentials
A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. The attack can be initiated remotely. The exploit has be...
The vulnerability of the libxrdp_send_to_channel() function on the XRDP server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the libxrdpsendtochannel function on the XRDP server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Windows Graphics Component, which allows a hacker to disclose protected information on Windows operating systems
The vulnerability of the Windows Graphics Component relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2022-20550
In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
The vulnerability of the Windows Graphics component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Graphics component in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
PT-2022-14763 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue allows for the launch of arbitrary protected activities due to a confused deputy, potentially leading to local escalation of privilege. This can be exploited with User execution privileges, a...
CVE-2022-42853
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.1. An app may be able to modify protected parts of the file system...
HCL BigFix Multiple Vulnerabilities (KB0098998)
The version of HCL BigFix Client installed on the remote host is affected by multiple vulnerabilities, including the following: - An improper authentication vulnerability exists in the curl subcomponent which might allow reuse OAUTH2-authenticated connections without properly making sure that the...
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome browsers allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information through a special...
CVE-2022-45968
Alist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder even a password protected one...
The vulnerability of the protection mechanism for detecting and responding to security threats at FortiEDR endpoints lies in the use of a strictly encrypted cryptographic key. This allows attackers to gain unauthorized access to the protected information.
The vulnerability of the security tool for detecting and responding to security threats at end points in FortiEDR is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected informati...
PT-2022-27703 · Alist · Alist
Name of the Vulnerable Software and Affected Versions: Alist version 3.4.0 Description: The issue allows a user with only file upload permission to upload any file to any folder, including those that are password protected. Recommendations: For Alist version 3.4.0, update to version 3.5.1 to...
The vulnerability of the Siemens PADS Standard/Plus Viewer application, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Siemens PADS Standard/Plus Viewer application relates to reading data beyond the buffer in memory during the processing of PCB file formats. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the network traffic analysis, network detection, and response mechanism of the Cortex XDR Agent stems from deficiencies in access control. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Cortex XDR Agent, which is responsible for network traffic analysis, network detection, and response, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
