7466 matches found
CVE-2021-34823
The ON24 ScreenShare aka DesktopScreenShare.app plugin before 2.0 for macOS allows remote file access via its built-in HTTP server. This allows unauthenticated remote users to retrieve files accessible to the logged-on macOS user. When a remote user sends a crafted HTTP request to the server, it...
ALEA-2021:3065 libwacom bug fix and enhancement update
The libwacom packages contain a library that provides access to a tablet model database. The libwacom packages expose the contents of this database to applications, allowing for tablet-specific user interfaces. The libwacom packages allow the GNOME tools to automatically configure screen mappings...
libwacom bug fix and enhancement update
The libwacom packages contain a library that provides access to a tablet model database. The libwacom packages expose the contents of this database to applications, allowing for tablet-specific user interfaces. The libwacom packages allow the GNOME tools to automatically configure screen mappings...
Mozilla Firefox 资源管理错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a Resource Management Error vulnerability, which exists due to improper resource management within the application.The Android version of Firefox may get stuck in full-scre...
PT-2021-3812 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Windows Recovery Environment Agent affected versions not specified Microsoft Windows affected versions not specified Description: The vulnerability is related to insufficient access control in the Windows Recovery Environment Agent component ...
Citrix App Layering | Unable to access the packaging VM in Azure portal while adding a version to OS Layer imported from Citrix Hypervisor/VMware base ELM
Issue while adding version to OS Layer, wherein the packaging vm of the OS Layer revision does not allow the Citrix Admin to RDP or ping to it. Cannot RDP nor Ping to this packaging vm and on the boot diagnostics in Azure, we see a black screen...
Privilege Escalation
otrs2 is vulnerable to privilege escalation. The vulnerability exists due to the lack of permission in the bulk action screen...
Writing great alt text: Emotion matters
If you prefer videos to articles, there's an episode of HTTP 203 on this topic. Ok, on with the article… Good alt text means that screen reader users get the same 'meaning' from the page as a fully sighted user. But sometimes that's easier said than done. I recently got stuck trying to figure out...
Citrix Provisioning Services - Target Fails To BDM Boot When Running The Imaging Wizard
When using BDM to boot the Master Target Device to capture a new vDisk it fails to boot. With verbose mode enabled in the bootstrap you will see the Target download the bootstrap and then login to a PVS Server at which point it will sit at a black screen indefinitely...
EPA scan getting failed through Safari Full Screen Mode on MacOS
When Safari browser is opened in Full Screen mode on MAC OS, The EPA Scan is getting failed. No issues with Safari in Window mode...
New Android Malware Uses VNC to Spy and Steal Passwords from Victims
A previously undocumented Android-based remote access trojan RAT has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud. Dubbed "Vultur" due to its use of Virtual Network Computing VNC's...
CVE-2021-21442
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19...
CVE-2021-21442
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19...
Code injection
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19...
PT-2021-6460 · Otrs Ag +1 · Otrs +2
Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions prior to 7.0.27 Description: The issue is related to errors in permission handling in the OTRS ticket system, allowing an attacker to remotely access confidential...
SUSE SLED15: caribou / caribou-common / caribou-devel / etc (SUSE-SU-2021:2414-1)
The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2414-1 advisory. Security issue fixed: - CVE-2021-3567: Fixed a segfault when attempting to use shifted characters bsc1186617. Tenable has extracted the precedi...
The vulnerability of Google Chrome’s full-screen mode, related to insufficient validation of input data, allows a hacker to compromise data integrity.
The vulnerability of the full-screen mode of the Google Chrome browser is related to the insufficient implementation of security policies. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...
The vulnerability of the encoding.c component of the GNU Screen window manager allows a hacker to introduce or modify arguments, thereby enabling them to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the encoding.c component of the GNU Screen terminal manager is related to incorrect processing of UTF-8 character sequences. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Screen Sharing extension in Google Chrome browser allows a hacker to induce a service failure.
The vulnerability of the Screen Sharing extension in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure through a specially created HTML page...