On the Way Thesis Detection System is Vulnerable to Information Leakage

Founded in 2017, Chengdu On the Way Technology Limited Liability Company is a company that specializes in information system integration services, integrated circuit design, communication equipment excluding wireless radio and television transmission and satellite ground receiving equipment,...

Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection

The Mozilla Foundation Security Advisory describes this flaw as: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as Curl' feature and pasted the command into a terminal, it...

CVE-2019-8768

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items...

CVE-2019-8768: Incomplete Cleanup

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items...

CVE-2019-13380

KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault...

CVE-2019-13380

KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault...

CVE-2018-4445

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

CVE-2018-4445

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

CVE-2018-4445

CVE-2018-4445 concerns the Apple Safari/WebKit issue where selecting "Clear History and Website Data" did not clear history. Affects iOS prior to 12.1.1 and Safari before 12.0.2; fixed by Apple in iOS 12.1.1/Safari 12.0.2 with enhanced data deletion. Mitigation is upgrading to the patched version...

CVE-2018-4445: Exposure of Sensitive Information to an Unauthorized Actor

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

PT-2019-10943

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 12.0.2 iOS versions prior to 12.1.1 Description: The issue was related to the "Clear History and Website Data" function not properly clearing the history. This was addressed through improved data deletion...

Search Autocomplete - Moderately critical - Cross Site Scripting - SA-CONTRIB-2018-070

This Search Autocomplete module enables you to autocomplete textfield using data from your website nodes, comments, etc... The module doesn't sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting XSS vulnerability. This vulnerability can be exploit...

Weak password vulnerability in NSG 9000-6G

The NSG™ 9000-6G high-density general purpose edgeQAM system is a highly integrated digital video solution for multiplexing request-based video content over IP networks. The NSG 9000-6G suffers from a weak password vulnerability that can be exploited by an attacker to log in to a website and gain...

Override Access Vulnerability in Tianxing Data Integration Service System

Beijing Tianxing Net Security Information Technology Co., Ltd. is an enterprise engaged in the research and development of network security and data exchange technology. There is an override access vulnerability in the Tianxing Data Integration Service System, which can be exploited by attackers ...

Apple Safari Spoofing and Cross-Site Scripting Vulnerabilities (HT208116)

Apple Safari is prone to spoofing and cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 24 : webkitgtk4 (2017-0f38995622)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

Fedora 25 : webkitgtk4 (2017-25ffd5b236)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

Unauthorized Access Vulnerability in Deephaven Jet Mixcall Customer Service System

Ltd. is a company that focuses on the research, development, manufacturing and sales of call centers and converged communication products. mixcall is one of the company's customer service systems. An unauthorized access vulnerability exists in the SZHJ Mixcall customer service system. Due to a la...

Safari iOS Information Disclosure

The vulnerability of the “Clear History and Website Data” function in the Safari browser and the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to obtain confidential information...

CVE-2016-1849

The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of browsing history, which might allow local users to obtain sensitive information by leveraging read access to a Safari directory...