11 matches found
EUVD-2022-5247
Malicious code in bioql PyPI...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
Expo on iOS is insecure due incorrect security attribute application
secure-store in Expo through 9.1.0 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
GHSA-RWX9-WQJ8-VR77 Expo on iOS is insecure due incorrect security attribute application
secure-store in Expo through 9.1.0 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
Code injection
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
CVE-2020-24653
Summary: CVE-2020-24653 affects Expo’s secure-store on iOS up to 2.16.1, where the app uses the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is selected. This misconfiguration can expose protected data due to the accessibility attribute, with high imp...
CVE-2020-24653
secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHENUNLOCKEDTHISDEVICEONLY is used...
Oracle Business Intelligence Publisher Multiple Vulnerabilities (Oct 2019 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.191015 or 12.2.1.3.x prior to 12.2.1.3.191015 or 12.2.1.4.x prior to 12.2.1.4.191015. It is, therefore, affected by multiple vulnerabilities as noted in the October 2019 Critical Patch...
360eshop Secure Store system 0day-vulnerability warning-the black bar safety net
Title: 360eshop Secure Store system 0day Content: 360eshop security store system uses FCK compiler version: 2.6.4.1 Test platform: IIS6 Test method: ----------------------------------------------------------------------- Warning The following test methods may carry offensive, for security researc...