8507 matches found
CVE-2015-0098
The CVE-2015-0098 issue affects Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1, specifically Task Scheduler. The root cause is improper handling of invalid tasks, allowing a local attacker to cause Task Scheduler to execute a crafted application with SYSTEM privileges (local privilege esc...
CVE-2015-0098
Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."...
Comala Workflows newtask.action taskName has multiple reflected cross-site scripting vulnerabilities
Comala Workflows is a WEB-based application. Comala Workflows newtask.action script handles A cross-site scripting vulnerability exists in taskName, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to obtain a sensitive...
PT-2015-1065
Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows Server 2008 R2 SP1 Description The issue allows local users to gain privileges by triggering application execution by an invalid task. An attacker who successfully exploits this could cause the Task...
Microsoft Windows Task Scheduler CVE-2015-0098 Remote Privilege Escalation Vulnerability
Description Microsoft Windows Kernel is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the System account. Technologies Affected Avaya Meeting Exchange - Client Registration Server 5.0 Avaya Meeting Exchan...
CVE-2015-0098: Undefined Security Weakness
Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."...
Information disclosure
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen...
CVE-2015-1116
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen...
CVE-2015-1116
The CVE-2015-1116 entry concerns Apple iOS UIKit View, where before iOS 8.3, application snapshots shown in the Task Switcher were not blurred, enabling local attackers in close proximity to read sensitive information from the screen. Affected software: iOS versions prior to 8.3 (UIKit View snaps...
PT-2015-5100
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue allows physically proximate attackers to obtain sensitive information by reading the device screen, as the UIKit View component displays unblurred application snapshots in the Task Switcher...
CVE-2015-1116: Exposure of Sensitive Information to an Unauthorized Actor
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen...
Apple iOS Task Switcher Sensitive Information Disclosure Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS UIKit. A remote attacker can exploit the vulnerability to expose data in application snapshots to Task Switcher to obtain sensitive information...
[SECURITY] Fedora 21 Update: rt-4.2.10-2.fc21
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
SAP EMR Unwired and Clinical Task Tracker Access Restriction Bypass Vulnerabilities
SAP EMR Unwired is a mobile app that enables physicians and nurses to instantly access patient data when they need it.SAP Clinical Task Tracker is an easy and secure way to access clinical tasks assigned to your patients anytime, anywhere. SAP EMR Unwired and Clinical Task Tracker fail to properl...
CVE-2015-2814
SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...
Code injection
SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...
CVE-2015-2814
CVE-2015-2814 affects SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt). The issue is an improper access restriction that lets remote attackers modify settings such as backendurl , clientid , ssourl , and infopageurl via unspecified vecto...
CVE-2015-2814
SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...
PT-2015-5909
Name of the Vulnerable Software and Affected Versions SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt affected versions not specified Description The issue allows remote attackers to change certain settings, including backendurl, clientid,...
CVE-2015-2814: Undefined Security Weakness
SAP EMR Unwired com.sap.mobile.healthcare.emr.v2 and Clinical Task Tracker com.sap.mobile.healthcare.ctt does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079...