PT-2017-11427

Name of the Vulnerable Software and Affected Versions Antiy Antivirus Engine version 5.0.0.06281654 Description The issue allows local users to cause a denial of service, resulting in a Blue Screen of Death BSOD, by providing a long third argument in a DeviceIoControl call. Recommendations For...

CVE-2017-8443: Use of GET Request Method With Sensitive Query Strings

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Non-documented developer's screen in Toshiba Lighting & Technology Corporation Home gateway

Overview Home gateway provided by Toshiba Lighting & Technology Corporation contains non-documented developer's screen. Yutaka Kokubu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#85901441: Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway

Home gateway provided by Toshiba Lighting & Technology Corporation contains multiple vulnerabilities listed below. Non-documented developer's screen CWE-912 - CVE-2017-2234 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N| Base Score: 2.4 CVSS v2|...

June 27, 2017—KB4022168 (Preview of Monthly Rollup)

None None...

June 27, 2017—KB4022723 (OS Build 14393.1378)

None None...

HOME SPOT CUBE2 vulnerable to improper authentication in WebUI

Overview HOME SPOT CUBE2 provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE2 contains improper authentication in WebUI. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

HOME SPOT CUBE2 vulnerable to OS command injection in clock settings

Overview HOME SPOT CUBE2 provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE2 contains OS command injection in clock settings. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

Avira Mobile Security for iOS Information Disclosure Vulnerability

Avira Mobile Security for iOS is a set of mobile security software based on the iOS platform from Avira Germany. An information disclosure vulnerability exists in iOS-based versions of Avira Mobile Security prior to 1.5.11, which originates when the program sends sensitive login information in...

7.13 VDA install hangs installing prerequisites (App Layering)

VDA installation hangs at the prerequisite screen. Depending on your version of the VDA software, it should look similar to this:...

CVE-2016-7821

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors...

CVE-2016-7821: Improper Input Validation

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors...

PT-2017-9372

Name of the Vulnerable Software and Affected Versions Buffalo WNC01WH versions 1.0.0.0 through 1.0.0.8 Description The issue allows remote attackers to cause a denial of service against the management screen via unspecified vectors. Recommendations For Buffalo WNC01WH versions 1.0.0.0 through...

CVE-2017-5082

Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page...

SRC-2018-0001 : Delta Industrial Automation Screen Editor Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation Screen Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

SRC-2018-0004 : Delta Industrial Automation Screen Editor Project File Parsing CThemeWnd Type Confusion Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation Screen Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

SRC-2018-0002 : Delta Industrial Automation Screen Editor Project File Parsing CDocument Use-After-Free Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation Screen Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

SRC-2018-0003 : Delta Industrial Automation Screen Editor Project File Parsing stopbits Out-of-Bounds Write Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation Screen Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

Home Screen Layout Policy and App Uninstall

Q. Does the Home Screen Layout device policy disable the apps from being uninstalled? A. Yes, apps cannot be uninstalled once the Home Screen Layout policy is deployed...

Receiver Crashes When Extending Full-Screen Display to Dual Monitors

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver crashes when extending full-screen display to dual monitors...