474 matches found
CVE-2022-34737
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality...
CVE-2022-34737
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality...
CVE-2022-34737
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality...
HUAWEI HarmonyOS security module authorization issue vulnerability
HUAWEI HarmonyOS is an operating system from Huawei, China HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from an incorrect privilege assignment in the application security module, which could be exploited by an attacker to cause the device to...
CVE-2021-38266
The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from authenticating by attempting to sign ...
CVE-2021-38266
The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from authenticating by attempting to sign ...
Code injection
The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from authenticating by attempting to sign ...
FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor
Microsoft continues to work with partners and customers to track and expand our knowledge of the threat actor we refer to as NOBELIUM, the actor behind the SUNBURST backdoor, TEARDROP malware, and related components. As we stated before, we suspect that NOBELIUM can draw from significant...
WhatsApp to Finally Let Users Encrypt Their Chat Backups in the Cloud
WhatsApp on Friday announced it will roll out support for end-to-end encrypted chat backups on the cloud for Android and iOS users, paving the way for storing information such as chat messages and photos in Apple iCloud or Google Drive in a cryptographically secure manner. The optional feature,...
Vulnerability of the RouterOS operating system’s /ram/pckg/security/nova/bin/ipsec process, allowing a hacker to trigger a service failure
The vulnerability of the /ram/pckg/security/nova/bin/ipsec” function in the RouterOS operating system is related to the use of the “assert” or similar operator. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
BAB TECHNOLOGIE GmbH eibPort 安全漏洞
Bab Technologie Gmbh BAB TECHNOLOGIE GmbH eibPort is an application from BAB TECHNOLOGIE GmbH Bab Technologie Gmbh, Germany, for managing smart furniture devices. A security vulnerability exists in BAB TECHNOLOGIE GmbH eibPort V3, which stems from a vulnerability in versions prior to 3.9.1 that...
[SECURITY] [DLA 2730-1] libpam-tacplus security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2730-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 04, 2021 https://wiki.debian.org/LTS -...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS A vulnerability exists in the debug function code in the selinux module of some Huawei products that allows the user state to have the abili...
SUSE: Security Advisory (SUSE-SU-2018:3333-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-48736
Name of the Vulnerable Software and Affected Versions SingularityCE versions prior to 4.3.5 SingularityPRO versions prior to 4.1.11 and 4.3.5 Description SingularityCE and SingularityPRO are open source container platforms. If a user depends on LSM restrictions to prevent harmful actions, an...
The vulnerability of the Titan M security module in Android operating systems allows attackers to increase their privileges.
The vulnerability of the Titan M security module in Android operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Titan M security module in Android operating systems allows attackers to increase their privileges.
The vulnerability of the Titan M security module in Android operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
Utimaco SecurityServer 安全漏洞
Utimaco SecurityServer is an application chip from Utimaco, Germany. It provides a general-purpose hardware security module that secures encryption key material for servers and applications. A security vulnerability exists in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0, which can be exploited by...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Jupyter Login Utility
This module checks if authentication is required on a Jupyter Lab or Notebook server. If it is, this module will bruteforce the password. Jupyter only requires a password to authenticate, usernames are not used. This module is compatible with versions 4.3.0 released 2016-12-08 and newer. Module...