Lucene search
+L

100 matches found

OSV
OSV
added 2017/11/13 8:29 p.m.1 views

DEBIAN-CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

4.3CVSS6.5AI score0.01626EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/13 8:29 p.m.15 views

CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

4.3CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2017/11/13 8:0 p.m.22 views

CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

5.8AI score0.01626EPSS
SaveExploits0References4
CVE
CVE
added 2017/11/13 8:0 p.m.69 views

CVE-2017-16804

CVE-2017-16804 affects Redmine before 3.2.7 and 3.3.x before 3.3.4. The vulnerability lies in the reminders function (app/models/mailer.rb) which does not verify issue visibility, allowing remote authenticated users to disclose sensitive information by reading e-mail reminder messages. Affected v...

4.3CVSS5.6AI score0.01626EPSS
SaveExploits0References4Affected Software1
The Hacker News
The Hacker News
added 2017/10/10 4:31 a.m.13 views

Microsoft Cortana Can Now Read Your Skype Messages to Make Chat Smarter

Microsoft today announced built-in support for Cortana—an artificial intelligence-powered smart assistant—in Skype messenger on Android as well as iOS devices. What purpose does it serve? Microsoft wants its AI-based smart assistance to understand your conversations and help you with quick...

6.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/05/27 12:0 a.m.39 views

Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities

Binary data 9327.prm...

10CVSS7.3AI score0.63468EPSS
SaveExploits51References56
BDU FSTEC
BDU FSTEC
added 2016/04/06 12:0 a.m.10 views

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a phone number collection event without the user’s permission.

The vulnerability of the Reminders component in the Mac OS X operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, acting remotely, to trigger a phone number collection event without user permission by clicking on the “tel” link...

4.3CVSS6.9AI score0.01216EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2016/03/25 12:0 a.m.5 views

Apple OS X Reminders Unauthorized Operation Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Reminders is one of the components of the application used to set up various types of reminders. An unauthorized manipulation vulnerability exists in Reminders in Apple OS X versions prior to 10.11.4. The...

6.5CVSS6.5AI score0.01216EPSS
SaveExploits0References1
NVD
NVD
added 2016/03/24 1:59 a.m.24 views

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

6.5CVSS4.8AI score0.01216EPSS
SaveExploits0References3
OSV
OSV
added 2016/03/24 1:59 a.m.10 views

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

6.5CVSS7.3AI score0.01216EPSS
SaveExploits0References3
Prion
Prion
added 2016/03/24 1:59 a.m.18 views

Design/Logic Flaw

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

4.3CVSS6.3AI score0.01216EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2016/03/24 1:0 a.m.59 views

CVE-2016-1770

The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...

6.5CVSS5.2AI score0.01216EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/03/22 12:0 a.m.103 views

Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.4. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppleRAID - AppleUSBNetworking - Bluetooth - Carbon - dyld - FontParser - HTTPProtocol - Intel Graphics Driver -...

10CVSS8.3AI score0.63468EPSS
SaveExploits51References56
The Hacker News
The Hacker News
added 2015/08/24 10:18 p.m.20 views

Microsoft Launches Cortana App For Android Users

Yes, she is here! Android users can now talk to Cortana – the first personal digital assistant – which is a patented product of Microsoft. She is available on all the devices running Windows 10. Earlier in May, Microsoft said they will make Cortana available for Android and iOS users. Therefore, ...

6.4AI score
SaveExploits0
securityvulns
securityvulns
added 2014/11/03 12:0 a.m.135 views

Incredible PBX remote command execution exploit

!/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.com Vendor: PBX in a Flash Vendor url:...

SaveExploits0
exploitpack
exploitpack
added 2014/10/27 12:0 a.m.27 views

Incredible PBX 2.0.6.5.0 - Remote Command Execution

Incredible PBX 2.0.6.5.0 - Remote Command Execution !/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.com...

0.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2014/10/23 10:19 p.m.19 views

Google Launches User-Friendly 'Inbox' App, Alternative To Gmail

Google is offering its users a completely new and better experience of its mailing service. And in an effort to do this, the company has launched a new email service, an alternative to Gmail, called "Inbox" on Wednesday that aims to make email more useful and preview next-generation capabilities...

6.6AI score
SaveExploits0
Packet Storm
Packet Storm
added 2014/10/21 12:0 a.m.29 views

Incredible PBX 11 2.0.6.5.0 Remote Command Execution

!/usr/bin/perl Title: Incredible PBX remote command execution exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 1 September 2014 Coded: 21 October 2014 Published: 21 October 2014 MorXploit Research http://www.MorXploit.com Vendor: PBX in a Flash Vendor url:...

0.2AI score
SaveExploits0
zdt
zdt
added 2008/06/17 12:0 a.m.78 views

WebCalendar 1.0.4 (includedir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== WebCalendar 1.0.4 includedir Remote File Inclusion Vulnerability ================================================================== WebCalendar v1.0.4 Remote F?le Include...

7.1AI score
SaveExploits0
Prion
Prion
added 2008/01/04 1:46 a.m.17 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via 1 the return parameter to user/remindPassword, 2 the q parameter to the category script, 3 the return parameter to the...

4.3CVSS6.2AI score0.04093EPSS
SaveExploits5References12Affected Software1
Rows per page
Query Builder