CVE-2021-27785

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website...

CVE-2021-3601

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. OpenSSL does not class this issue as a security vulnerability. The trusted CA store should not contain anything that the user does not trust to issue other certificates. Notes:...

UBUNTU-CVE-2021-3601

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. OpenSSL does not class this issue as a security vulnerability. The trusted CA store should not contain anything that the user does not trust to issue other certificates. Notes:...

CVE-2021-3601

CVE-2021-3601 is rejected/not used; this CVE entry is not a security vulnerability per the description.

CVE-2021-3601

Removed by vendor...

Microweber Cross-Site Scripting Vulnerability (CNVD-2022-54328)

Microweber is a drag-and-drop online store management system from the US Microweber community. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21. An attacker could use this vulnerability to execute...

Microweber Cross-Site Scripting Vulnerability (CNVD-2022-54325)

Microweber is an online store management system that provides drag-and-drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in versions of Microweber prior to 1.2.21, which...

MAL-2022-5877 Malicious code in rv-modal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56cf259076204ead00ddb8d24a7b19b24a7ebc650df13dd4df62139102b1349c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rv-modal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56cf259076204ead00ddb8d24a7b19b24a7ebc650df13dd4df62139102b1349c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

Google Bringing the Android App Permissions Section Back to the Play Store

Google on Thursday said it's backtracking on a recent change that removed the app permissions list from the Google Play Store for Android across both the mobile app and the web. "Privacy and transparency are core values in the Android community," the Android Developers team said in a series of...

Samsung Galaxy Store Input Validation Error Vulnerability

Samsung Galaxy Store is an application store of Samsung Mobile Samsung in South Korea. versions prior to Samsung Galaxy Store 4.5.41.8 are vulnerable to an input validation error, which could be exploited by attackers to launch campaigns with Galaxy Store privileges...

Russian Hackers Tricked Ukrainians with Fake "DoS Android Apps to Target Russia" — The Hacker News

Russian threat actors capitalized on the ongoing conflict against Ukraine to distribute Android malware camouflaged as an app for pro-Ukrainian hacktivists to launch distributed denial-of-service DDoS attacks against Russian sites. Google Threat Analysis Group TAG attributed the malware to Turla,...

[SECURITY] Fedora 35 Update: docker-distribution-2.6.2-17.git48294d9.fc35

Docker toolset to pack, ship, store, and deliver content...

Several New Play Store Apps Spotted Distributing Joker, Facestealer and Coper Malware — The Hacker News

Google has taken steps to ax dozens of fraudulent apps from the official Play Store that were spotted propagating Joker, Facestealer, and Coper malware families through the virtual marketplace. While the Android storefront is considered to be a trusted source for discovering and installing apps,...

Samsung Galaxy Store Input Validation Error Vulnerability (CNVD-2022-70731)

Samsung Galaxy Store is an application store for Samsung Samsung mobile devices.An input validation error vulnerability exists in versions prior to Samsung Galaxy Store 4.5.41.8, which stems from faulty input validation logic and can be exploited by local attackers to launch campaigns with Galaxy...

Fedora: Security Advisory for golang-etcd-bbolt (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google Removes "App Permissions" List from Play Store for New "Data Safety" Section

Following the launch of a new "Data safety" section for the Android app on the Play Store, Google appears to be readying to remove the app permissions list from both the mobile app and the web. The change was highlighted by Esper's Mishaal Rahman earlier this week. The Data safety section, which...

Samsung Galaxy Store Input Validation Error Vulnerability (CNVD-2022-76491)

Samsung Galaxy Store is an application store for Samsung Samsung mobile devices.An input validation error vulnerability exists in versions prior to Samsung Galaxy Store 4.5.41.8, which stems from incorrect input validation logic in Galaxy Store. A local attacker could exploit this vulnerability t...

New variant of Android SpyJoker malware removed from Play Store after 3 million+ installs

Security researcher Maxime Ingrao has found a new variant of Android/Trojan.Spy.Joker which hes dubbed Autolycos. Malware in this family secretly subscribes users to premium services. The researcher noted that the eight applications that contained this malware had racked up a total of over 3...