742 matches found
Foxit Reader and Foxit PhantomPDF for Windows Out-of-Bounds Read Information Disclosure Vulnerability
Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. An out-of-bounds read information disclosure vulnerability exists in the handling of the Lower method of the XFA object in Foxit...
PT-2018-14146
Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.2.0.9297 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...
Foxit Reader XFA Lower Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...
Zendesk: Admin Macro Description Stored XSS
A description field only available to account Administrators allowed for unexpected input which could be triggered to execute JavaScript if viewed by lower-level roles under certain circumstances. Thanks to @hariharan21 for their great work!...
Security Bulletin: Insufficient authorization check for project actions in WebSphere Lombardi Edition (CVE-2014-4844)
Summary By using WebSphere Lomabrdi Edition WLE you can import and export process applications and toolkits. Although this functionality is available only to authorized users, the actual server side code accepts requests from lower privileged users. Vulnerability Details CVE ID: CVE-2014-4844 CVS...
DEBIAN-CVE-2018-1121
procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's procpidreaddir returns PID entries in ascending numeric order, a process occupying a high PID can use inotify events to determine when the process list is being scanned, and fork/exec to obtain a lower...
Setting ProcMon to run at a lower altitude to capture other filter drivers
If you need to get Procmon's filter to run below us in the filter stack, it has a setting for that. Procmon is usually used to figure out what is happening on the machine, but you do not get to see the activity of things such as virus scanners and unifiltr because they happen at a lower level tha...
Privilege Context Switching Error
github.com/kubernetes-incubator/cri-o is susceptible to privilege context switching error. The vulnerability exists in handling ambient capabilities. During container execution, containers running with elevated privileges may allow a user with lower privilege to perform abilities they should not...
FreeBSD : jenkins -- multiple vulnerabilities (06ab7724-0fd7-427e-a5ce-fe436302b10c)
Jenkins developers report : The agent to master security subsystem ensures that the Jenkins master is protected from maliciously configured agents. A path traversal vulnerability allowed agents to escape whitelisted directories to read and write to files they should not be able to access. Black...
PT-2018-6445
Name of the Vulnerable Software and Affected Versions: IBM Security QRadar SIEM versions 7.2 through 7.3 Description: The issue could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. Recommendations: For versions 7.2 and 7.3, update t...
Your startup disk is almost full – How you can fix it on your Mac
Every Mac user will experience the message “Your startup disk is almost full” at one time or another. Understanding what “startup disk is full” actually means is the first important step before you can fix this issue. What if my Mac’s Startup Disk is Full? The answer to this question is easy. Whe...
Huawei FusionSphere OpenStack Information Disclosure Vulnerability (CNVD-2017-34417)
Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. Huawei FusionSphere OpenStack suffers from an...
CVE-2016-2977
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937...
PT-2017-8286
Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server versions 8.5.2 through 9.0 Description The issue allows a malicious user to lower other users' hands in a meeting, potentially disrupting the meeting process. Recommendations For versions 8.5.2 through 9.0, at the...
CVE-2016-2977: Improper Input Validation
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937...
CVE-2017-2335
A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the...
PT-2017-8880
Name of the Vulnerable Software and Affected Versions IBM Cognos Disclosure Management version 10.2 Description The issue allows a malicious attacker to execute commands as a lower privileged user when a malicious document is opened. Recommendations For IBM Cognos Disclosure Management version...
Tencent QQ group system has design logic loopholes
Tencent QQ is an Internet-based instant messaging IM software. There is a design logic vulnerability in the Tencent QQ group system that allows an attacker to modify form information to lower the QQ group level...
