PT-2023-13208

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description A logic issue was addressed with improved state management, allowing a user to potentially view restricted content from the lock screen. Recommendations For iOS versions prio...

CVE-2022-32855: Exposure of Sensitive Information to an Unauthorized Actor

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may be able to view restricted content from the lock screen...

CVE-2022-48254: Improper Authentication

There is a data processing error vulnerability in Leia-B29 2.0.0.49M03. Successful exploitation could bypass lock screen authentication...

CVE-2022-32855

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may be able to view restricted content from the lock screen...

CVE-2022-48254

There is a data processing error vulnerability in Leia-B29 2.0.0.49M03. Successful exploitation could bypass lock screen authentication...

CVE-2022-48254

The CVE-2022-48254 entry relates to Huawei Leia-B29 devices (version 2.0.0.49/M03) and describes a data processing error that can enable authentication bypass of the lock screen. Connected sources confirm the affected product (Huawei Leia-B29 / Huawei Band context) and the root cause as a data pr...

Huawei Leia-B29 authorization issue vulnerability

The Huawei Leia-B29 is a smart bracelet from the Chinese company Huawei Huawei. An authentication bypass vulnerability exists in Huawei Leia-B29 version 2.0.0.49M03, which stems from a data processing error. An attacker can exploit the vulnerability to bypass the lock screen authentication...

CVE-2022-48254

There is a data processing error vulnerability in Leia-B29 2.0.0.49M03. Successful exploitation could bypass lock screen authentication...

[SECURITY] Fedora 37 Update: plymouth-kcm-5.27.1-1.fc37

This is a System Settings configuration module for configuring the plymouth splash screen...

[SECURITY] Fedora 37 Update: kscreenlocker-5.27.1-1.fc37

Library and components for secure lock screen architecture...

Mozilla Firefox Code Problem Vulnerability (CNVD-2023-55355)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code issue vulnerability that stems from a lack of notifications when entering full-screen mode within an application, which can be exploited by attackers to cause...

firefox security update

CentOS Errata and Security Advisory CESA-2023:0812 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks

An open source command-and-control C2 framework known as Havoc is being adopted by threat actors as an alternative to other well-known legitimate toolkits like Cobalt Strike, Sliver, and Brute Ratel. Cybersecurity firm Zscaler said it observed a new campaign in the beginning of January 2023...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. This updat...

RLSA-2023:0824 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.8.0. Security Fixes: Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes CVE-2023-25728 Mozilla:...

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RLSA-2023:0821 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.8.0. Security Fixes: Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes CVE-2023-25728 Mozilla:...

RLSA-2023:0808 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.8.0 ESR. Security Fixes: Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation...

CentOS 7 : thunderbird (RHSA-2023:0817)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0817 advisory. - If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which cou...

CentOS 7 : firefox (RHSA-2023:0812)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0812 advisory. - The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe...