7631 matches found
Google Chrome Sharing security bypass vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Sharing in versions prior to Google Chrome 92.0.4515.107. An attacker could use this vulnerability to bypass security restrictions...
MacOS security vulnerabilities
Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. The macOS suffers from a security vulnerability that stems from the fact that a malicious application may be able to access data from an account where the user is using Home...
PT-2021-18889
Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.5 Description A permissions issue was addressed with improved validation. A malicious application may be able to access data about the accounts the user is using Family Sharing with. Recommendations For versions prio...
OPENSUSE-SU-2021:1068-1 Security update for nextcloud
This update for nextcloud fixes the following issues: nextcloud was updated to 20.0.11: - Fix boo1188247 - CVE-2021-32678: OCS API response ratelimits are not applied - Fix boo1188248 - CVE-2021-32679: filenames where not escaped by default in controllers using DownloadResponse - Fix boo1188249 -...
PT-2021-3677
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to insufficient validation of untrusted input in the Sharing function of Google Chrome, allowing a remote attacker to bypass navigation restrictions via a crafted...
Google Chrome: Input validation error vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Sharing in versions prior to Google Chrome 92.0.4515.107. An attacker could use this vulnerability to bypass security restrictions...
KLA12236 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface, obtain sensitive information, perform cross-site scripting attack. Below is a complete li...
Five Critical Password Security Rules Your Employees Are Ignoring
According to Keeper Security's Workplace Password Malpractice Report, many remote workers aren't following best practices for password security. Password security was a problem even before the advent of widespread remote work. So, what happened post-pandemic? Keeper Security's Workplace Password...
Nextcloud Permission License and Access Control Issues Vulnerabilities
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A permission permission and access control issue vulnerability exists in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3, which stems from...
Unspecified vulnerability in Nextcloud (CNVD-2021-51795)
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 19.0.13, 20.011, and 21.0.3, which can be exploited by an attacker to enumerate...
CVE-2021-0604
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
Design/Logic Flaw
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2021-0604
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
Screen Sharing Extension Google Chrome DoS
The vulnerability of the Screen Sharing extension in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure through a specially created HTML page...
NextCloud permissions and access control issues
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A permission permission and access control issue vulnerability exists in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3, which stems from...
NextCloud security vulnerabilities
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability in Nextcloud Server in versions prior to 19.0.13, 20.011, and 21.0.3 can be exploited by an attacker to enumerate potentially valid...
NextCloud security vulnerabilities
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 19.0.13, 20.011, and 21.0.3, which can be exploited by an attacker to enumerate...
CVE-2021-36212
app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view...