Lucene search
+L

1108 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/27 12:00 a.m.•3 views

CVE-2022-48356: Improper Input Validation

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition...

7.5CVSS5.8AI score0.00474EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/27 12:00 a.m.•3 views

CVE-2022-48360: Incorrect Default Permissions

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS5.8AI score0.004EPSS
SaveExploits0References2
Microsoft Malware Protection
Microsoft Malware Protection
•added 2023/03/22 5:00 p.m.•25 views

The next wave of multicloud security with Microsoft Defender for Cloud, a Cloud-Native Application Protection Platform (CNAPP)

With digital transformation in the face of macroeconomic pressures, strategies to optimize both cloud environments and cloud security are increasingly appealing to enterprises. Organizations worry about vulnerabilities in code getting deployed, critical misconfigurations, overprivileged access to...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/03/17 10:22 a.m.•12 views

Lookalike Telegram and WhatsApp Websites Distributing Cryptocurrency Stealing Malware

Copycat websites for instant messaging apps like Telegram and WhatApp are being used to distribute trojanized versions and infect Android and Windows users with cryptocurrency clipper malware. "All of them are after victims' cryptocurrency funds, with several targeting cryptocurrency wallets," ES...

6.9AI score
SaveExploits0
Code423n4
Code423n4
•added 2023/03/07 12:00 a.m.•29 views

LUSDT non-compliance with the EIP-2612 standard

Lines of code Vulnerability details Impact Inability to integrate LUSDT into contracts of other services where the DOMAINSEPARATOR is used or strict adherence to the EIP2612 standard is required. Various network analyzers that automatically determine the type of contracts will not be able to...

6.7AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2023/03/06 1:00 a.m.•21 views

A week in security (February 27 - March 5)

Last week on Malwarebytes Labs: Fighting online censorship, or, encryption's latest surprise use-case, with Mallory Knodel: Lock and Code S04E05 How to work from home securely, the NSA way TikTok probed over child privacy practices iPhone users targeted in phone AND data theft campaign US Marshal...

0.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/03/05 12:00 a.m.•15 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker exploited the vulnerability to make the face feature unavailable...

7.5CVSS7.4AI score0.00474EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
•added 2023/02/21 12:00 a.m.•19 views

February 21, 2023—KB5022905 (OS Build 22000.1641) Preview

None None...

6.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:33 a.m.•9 views

SUSE CVE-2013-6664

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

7.5CVSS9.2AI score0.01352EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:30 a.m.•11 views

SUSE CVE-2014-1732

Use-after-free vulnerability in browser/ui/views/speechrecognitionbubbleviews.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that...

7.5CVSS9.6AI score0.01685EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:38 a.m.•8 views

SUSE CVE-2021-38013

Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS8.8AI score0.01002EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2023/02/15 3:30 a.m.•6 views

SUSE CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.00769EPSS
SaveExploits0References6
NVD
NVD
•added 2023/02/09 7:15 p.m.•27 views

CVE-2023-21427

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

6.5CVSS5.7AI score0.00256EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/09 7:15 p.m.•36 views

Improper access control

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

3.3CVSS6.4AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/09 12:00 a.m.•11 views

CVE-2023-21427

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

5.4CVSS7AI score0.00256EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/09 12:00 a.m.•1 views

CVE-2023-21427: Improper Access Control

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

6.5CVSS5.8AI score0.00256EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
•added 2023/02/03 12:07 p.m.•19 views

Manipulating Weights in Face-Recognition AI Systems

Interesting research: "Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons": Abstract: In this paper we describe how to plant novel types of backdoors in any facial recognition model based on the popular architecture of deep Siamese neural network...

1.7AI score
SaveExploits0
MSRC
MSRC
•added 2023/01/26 8:00 a.m.•49 views

Congratulations to the Top MSRC 2022 Q4 Security Researchers!

Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2022 Q4 Security Researcher Leaderboard are:...

1.3AI score
SaveExploits0
HackRead
HackRead
•added 2023/01/23 4:10 p.m.•33 views

Advancing Medical Technology Requires More Medical Device Regulation

By Waqas While countries like Japan, China, the United States, and the United Kingdom have acknowledged the importance of medical device regulation, worldwide recognition is still a long way to go. This is a post from HackRead.com Read the original post: Advancing Medical Technology Requires More...

3.1AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2023/01/07 2:00 p.m.•22 views

Slack Discloses Breach of Its Github Code Repository

Plus: Russian spies uncovered in Europe, face recognition leads to another wrongful arrest, a new porn ID law, and more...

2.1AI score
SaveExploits0
Rows per page
Query Builder