Lucene search
+L

4925 matches found

Citrix
Citrix
added 2023/03/07 12:00 a.m.48 views

Service 'Citrix Workspace Updater Service' (CWAUpdaterService) Failed to Start When Installing CWA

Failed to install CWA. Error message shows:Service 'Citrix Workspace Updater Service' CWAUpdaterService failed to start, Verify that you have sufficient privileges to start system services...

7AI score
SaveExploits0
NVD
NVD
added 2023/03/03 8:15 a.m.28 views

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

9.6CVSS8.4AI score0.00416EPSS
SaveExploits0References7
Prion
Prion
added 2023/03/03 8:15 a.m.27 views

Cross site scripting

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

6.8CVSS8.9AI score0.00416EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/03 7:00 a.m.8 views

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

8.2CVSS6.9AI score0.00416EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/03/03 7:00 a.m.35 views

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

8.2CVSS9.3AI score0.00416EPSS
SaveExploits0References7
CVE
CVE
added 2023/03/03 7:00 a.m.87 views

CVE-2023-0957

CVE-2023-0957 describes a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in Gitpod versions prior to release-2022.11.2.16. The issue arises because the Origin header is not restricted, allowing an attacker to initiate WebSocket connections to the Gitpod JSONRPC server using a victim’s crede...

9.6CVSS9AI score0.00416EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2023/03/03 7:00 a.m.16 views

CVE-2023-0957

An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This...

8.2CVSS9.3AI score
SaveExploits0References9
Citrix
Citrix
added 2023/03/02 12:00 a.m.18 views

workspace cannot find a valid smart card certificate

Workspace App gives error " cannot find a valid smart card certificate". This works via Browser but not via Workspace App...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2023/03/02 12:00 a.m.30 views

How to disable "This Site is trying to open citrix workspace launcher" prompt when launch resource

"This Site is trying to open citrix workspace launcher" when launch resourcevia Edge or Google Chrome...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/03/01 9:55 a.m.40 views

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

Google has announced the general availability of client-side encryption CSE for Gmail and Calendar, months after piloting the feature in late 2022. The data privacy controls enable "even more organizations to become arbiters of their own data and the sole party deciding who has access to it,"...

1.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/03/01 9:55 a.m.6 views

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

Google has announced the general availability of client-side encryption CSE for Gmail and Calendar, months after piloting the feature in late 2022. The data privacy controls enable "even more organizations to become arbiters of their own data and the sole party deciding who has access to it,"...

6.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/28 6:48 p.m.46 views

Security Bulletin: IBM Planning Analytics and IBM Planning Analytics Workspace are affected by a security vulnerability in IBM WebSphere Application Server Liberty (CVE-2022-34165)

Summary There is a vulnerabilty in IBM WebSphere Application Server Liberty used by IBM Planning Analytics and IBM Planning Analytics Workspace. The applicable CVE has been addressed in IBM Planning Analytics and Planning Analytics Workspace. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION...

5.4CVSS5.5AI score0.00484EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/02/28 5:15 p.m.23 views

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

6.8CVSS6.5AI score0.00919EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/28 5:15 p.m.10 views

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

6.8CVSS6.6AI score0.00919EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/28 5:15 p.m.25 views

Design/Logic Flaw

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

4.6CVSS6.5AI score0.00919EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/28 12:00 a.m.13 views

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

6.7AI score0.00919EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/28 12:00 a.m.36 views

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

6.7AI score0.00919EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/02/28 12:00 a.m.9 views

VMware Workspace ONE Content 访问控制错误漏洞

VMware Vmware Workspace One is a platform from VMware that supports cross-device applications for rapid delivery and management of applications. The platform, which includes VMware Horizon and VMware Horizon Cloud, integrates access control, application management, and multi-platform endpoint...

6.8CVSS6.6AI score0.00919EPSS
SaveExploits0References4
VMware
VMware
added 2023/02/28 12:00 a.m.50 views

VMware Workspace ONE Content update addresses a passcode bypass vulnerability (CVE-2023-20857)

3. Passcode bypass vulnerability CVE-2023-20857 VMware Workspace ONE Content contains a passcode bypass vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.3...

4.6CVSS6.7AI score0.00919EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/02/28 12:00 a.m.148 views

CVE-2023-20857

CVE-2023-20857 relates to a passcode bypass vulnerability in VMware Workspace ONE Content. Connected sources confirm the issue affects the Workspace ONE Content component and could allow bypassing the device passcode when the attacker has access to a rooted device. The primary public advisories d...

6.8CVSS6.4AI score0.00919EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder