🕴 Industrial Defender Risk Signal, a Risk-Based Vulnerability Management Solution for OT Security 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Darkreading
Industrial Defender Risk Signal, a Risk-Based Vulnerability Management Solution for OT Security
🕴 C3 Complete Acquires Information Security Business Unit of Compliance Solutions Inc. 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Darkreading
C3 Complete Acquires Information Security Business Unit of Compliance Solutions Inc.
‼️CVE-2024-20802‼️
📖 Read more
Via "National Vulnerability Database"
Improper access control vulnerability in Samsung DeX prior to SMR Jan2024 Release 1 allows owner to access other users' notification in a multiuser environment.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20803‼️
📖 Read more
Via "National Vulnerability Database"
Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan2024 Release 1 allows remote attackers to establish pairing process without user interaction.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20804‼️
📖 Read more
Via "National Vulnerability Database"
Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows attackers to write arbitrary file.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20805‼️
📖 Read more
Via "National Vulnerability Database"
Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows attackers to write arbitrary file.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20806‼️
📖 Read more
Via "National Vulnerability Database"
Improper access control in Notification service prior to SMR Jan2024 Release 1 allows local attacker to access notification data.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20807‼️
📖 Read more
Via "National Vulnerability Database"
Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows attacker to get sensitive information.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20808‼️
📖 Read more
Via "National Vulnerability Database"
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-20809‼️
📖 Read more
Via "National Vulnerability Database"
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0222‼️
📖 Read more
Via "National Vulnerability Database"
Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity High📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0223‼️
📖 Read more
Via "National Vulnerability Database"
Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity High📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0224‼️
📖 Read more
Via "National Vulnerability Database"
Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity High📖 Read more
Via "National Vulnerability Database"
‼️CVE-2024-0225‼️
📖 Read more
Via "National Vulnerability Database"
Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity High📖 Read more
Via "National Vulnerability Database"
👍1
‼️CVE-2023-6498‼️
📖 Read more
Via "National Vulnerability Database"
The Complianz GDPRCCPA Cookie Consent plugin for WordPress is vulnerable to Stored CrossSite Scripting via admin settings in all versions up to and including 6.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administratorlevel permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multisite installations and installations where unfilteredhtml has been disabled.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2023-6733‼️
📖 Read more
Via "National Vulnerability Database"
The WPMembers Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.8 via the wpmemfield shortcode. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data including user emails, password hashes, usernames, and more.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2023-6738‼️
📖 Read more
Via "National Vulnerability Database"
The Page Builder Pagelayer Drag and Drop website builder plugin for WordPress is vulnerable to Stored CrossSite Scripting via the 'pagelayerheadercode', 'pagelayerbodyopencode', and 'pagelayerfootercode' meta fields in all versions up to, and including, 1.7.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributorlevel and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This appears to be a reintroduction of a vulnerability patched in version 1.7.7.📖 Read more
Via "National Vulnerability Database"
❤1
‼️CVE-2023-29962‼️
📖 Read more
Via "National Vulnerability Database"
SCMS v5.0 was discovered to contain an arbitrary file read vulnerability.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2023-52322‼️
📖 Read more
Via "National Vulnerability Database"
ecrirepublicassembler.php in SPIP before 4.1.3 and 4.2.x before 4.2.7 allows XSS because input from request is not restricted to safe characters such as alphanumerics.📖 Read more
Via "National Vulnerability Database"
‼️CVE-2023-41784‼️
📖 Read more
Via "National Vulnerability Database"
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro 📖 Read more
Via "National Vulnerability Database"