CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Firefox Bug Opens iPhone AirPods to Third-Party Snooping

Five high-severity bugs were fixed in the Firefox web browser with the release of version 74 by the Mozilla Foundation on Tuesday. In addition, Mozilla reported a quirky moderate-severity flaw that allows hackers to target iPhone users and collect data tied to connected AirPods, if in use. In...

CVE-2020-9282

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios...

Multiple Huawei products not adequately certified for vulnerability

The OSCA-550AX is a 55-inch smart screen launched by Huawei's brand Honor.The OSCA-550A is the first 55-inch terminal smart screen launched by Honor using Huawei's Hongmeng operating system. A security vulnerability exists in multiple Huawei products, which stems from the system's failure to...

Memory Corruption Vulnerability in Xinjie Electric's Touch Screen Screen Editing Software Twin 2.D.3o

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.D.3o, which can be exploit...

Memory Corruption Vulnerability in Xinjie Electric Touch Screen Editing Software Twin 2.D.3n

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.D.3n, which can be exploit...

Code execution vulnerability exists in Recorded Big Shots

Record Bigger is a lightweight and efficient screen recording software. A code execution vulnerability exists, which can be exploited by attackers to execute arbitrary code...

Memory Corruption Vulnerability in Xinjie Electric Touch Screen Editing Software Twin 2.C.6i

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.C.6i, which can be exploit...

Memory Corruption Vulnerability in Xinjie Electric's Touch Screen Screen Editing Software Twin 2.E.2

Wuxi Xinjie Electric Co., Ltd XINJE is a well-known domestic enterprise specializing in the research, development and application of industrial automation products. A memory corruption vulnerability exists in Xinjie Electric's touch screen screen editing software Twin 2.E.2, which can be exploite...

Nanda Aotuo Technology NA-VIEW V1.02.4 suffers from denial of service vulnerability (CNVD-2020-21835)

NA-VIEW is a touch screen configuration software. NA-VIEW V1.02.4 has a denial of service vulnerability that can be exploited by attackers to construct malformed HMI files that can crash the program...

Denial-of-service vulnerability in NA-VIEW V2.0 (for 15-inch touch screen) of Nanda Aotuo Technology Jiangsu Co.

NA-VIEW is a touch screen configuration software. NA-VIEW V2.0 for 15-inch touch screen has a denial-of-service vulnerability that can be exploited by attackers to construct malformed BMP images that can cause the program to crash...

Denial of Service Vulnerability in NA-VIEW V1.02.4 by Nanda Aotuo Technology

NA-VIEW is a touch screen configuration software. A denial of service vulnerability exists in NA-VIEW V1.02.4, which can be exploited by an attacker to construct a malformed BMP image file causing the program to crash...

Memory Corruption Vulnerability in TAS MH Ethernet Touch Screen Software (CNVD-2020-23755)

Ltd. is a wholly foreign owned enterprise established in China on July 1, 2000 by Antai International Investment Singapore Pte Ltd, a subsidiary of TECO Group, a renowned Taiwanese multinational corporation. A memory corruption vulnerability exists in the MH Ethernet touch screen software of Taia...

Memory Corruption Vulnerability in MTI MH Ethernet Touch Screen Software

Ltd. is a wholly foreign owned enterprise established in China on July 1, 2000 by Antai International Investment Singapore Pte Ltd, a subsidiary of TECO Group, a renowned Taiwanese multinational corporation. A memory corruption vulnerability exists in the MTI MH Ethernet touch screen software,...

CVE-2020-3859

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2020-3828

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

CVE-2020-3828

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

Code injection

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...