PT-2018-11524

Name of the Vulnerable Software and Affected Versions OneFileCMS versions prior to 2012-04-14 Description The issue allows attackers to execute arbitrary PHP code via a .php filename on the Upload screen. Recommendations For versions prior to 2012-04-14, consider restricting access to the Upload...

Microsoft Windows: Screen saver timeout

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintimoutscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Screen saver timeout users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Turn off toast notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintoastlockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off toast notifications on the lock screen users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Enable screen saver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winscreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Enable screen saver users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows: Force specific screen saver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winforcescreensaver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Force specific screen saver users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows 10: Configure Windows spotlight on lock screen

This policy setting lets you configure Windows spotlight on the lock screen. If you enable this policy setting, SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows 10: Cortana above lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincortanalockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow Cortana above lock screen Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Cross site scripting

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

CVE-2018-1000508

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

Cross site scripting

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

PT-2018-9406

Name of the Vulnerable Software and Affected Versions WP ULike versions 2.8.1 through 3.1 Description The issue allows unauthorized users to perform administrative actions due to a Cross Site Scripting XSS vulnerability in the Settings screen. This can be exploited when an admin visits the logs...

PT-2018-8915

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.0 through 5.4.1 Description A stored cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML in the 'E-mail Details Screen' via unspecified vectors. Recommendations For Cybozu...

CVE-2018-1000508: Improper Neutralization of Input During Web Page Generation

WP ULike version 2.8.1, 3.1 contains a Cross Site Scripting XSS vulnerability in Settings screen that can result in allows unauthorised users to do almost anything an admin can. This attack appear to be exploitable via Admin must visit logs page. This vulnerability appears to have been fixed in 3...

CVE-2018-0557: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

Anthem SmartArmor Anti-Ransom Freeware Protectdrv.sys Driver Has Denial of Service Vulnerability

Antenna Smart Armor Anti-Ransom Free Special Edition is an anti-ransom software for Antenna Smart Armor Terminal Defense System. There is a denial-of-service vulnerability in the protectdrv.sys driver of AnTen SmartAntiRansom Free Edition. An attacker can exploit the vulnerability to cause a...

Delay with touch screen swipe in HDX session from touch screen device when using Receiver for Windows

When using a touch screen device such as Microsoft surface pro which utilizes the full receiver for windows client users notice a delay when using the touch screen swipe feature in the session. This delay is most obvious when using the finger or a stylus pen to draw in an application such as MS...

Denial of Service Vulnerability in Antenna ATool Tools IRPFile.sys Driver

ATool is a professional system security inspection toolset designed for advanced user groups, which can analyze, diagnose and dispose of all kinds of common host problems and harmful files, as well as checking and repairing the system's sharing, account, patch and other information. A denial of...