PT-2023-1020

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU Family affected versions not specified Description The issue is related to the absence of an Immutable Root of Trust in Hardware, which prevents the validation of code integrity during load-time. An attacker with...

D‑Link DNR-322L Data Compromise Check Failure

The vulnerability of the microprogrammed software of the D-Link DNR-322L network video recorder relates to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

July 21, 2022—KB5015880 (OS Build 17763.3232) Preview

July 21, 2022—KB5015880 OS Build 17763.3232 Preview Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note 7/12/22 After September 20, 2022, there will no longer be optional, non-security releases known as "C" or preview releases for the 2019 LT...

July 19, 2022—KB5015879 (OS Build 20348.859) Preview

July 19, 2022—KB5015879 OS Build 20348.859 Preview Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. No...

CVE-2022-28944

CVE-2022-28944 affects multiple EMCO Software products (e.g., MSI Package Builder for Windows 9.1.4; Remote Installer 6.0.13; Ping Monitor 8.0.18; Remote Shutdown 7.2.2; WakeOnLan 2.0.8; Network Inventory 5.8.22; Network Software Scanner 2.0.8; UnLock IT 6.1.1) via the Updater component. The flaw...

Fortinet FortiOS Arbitrary File Download

Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files...

Trojan Source CVE-2021-42572: No Panic Necessary

What is this thing? Researchers at the University of Cambridge and the University of Edinburgh recently published a paper on an attack technique they call “Trojan Source.” The attack targets a weakness in text-encoding standard Unicode—which allows computers to handle text across many different...

October 26, 2021—KB5006745 (OS Build 20348.320) Preview

October 26, 2021—KB5006745 OS Build 20348.320 Preview Applies To Windows Server 2022 Improvements and fixes This non-security update includes quality improvements. Key changes include: Addresses a regression that might cause stop error 0x38 on some machine configurations that use non-ASCII text i...

October 19, 2021—KB5006744 (OS Build 17763.2268) Preview

October 19, 2021—KB5006744 OS Build 17763.2268 Preview Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality...

August 26, 2021—KB5005102 (OS Build 17763.2145) Preview

August 26, 2021—KB5005102 OS Build 17763.2145 Preview Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note 6/15/21 IMPORTANT This release includes the Flash Removal Package. Taking this update will remove Adobe Flash from the machine. For more...

Preventing your Cloud 'Secrets' from Public Exposure: An IDE plugin solution

I'm sure you would agree that, in today's digital world, the majority of applications we work on require some type of credentials – to connect to a database with a username/password, to access computer programs via authorized tokens, or API keys to invoke services for authentication. Credentials,...

Two Google plans that could make open source code more secure

Recently Google announced that it will fund the further development of Rust. Rust is a low-level programming language that is designed to be more memory secure than other popular programming languages, such as C. Google has also proposed an end-to-end framework for supply chain integrity which it...

Design/Logic Flaw

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022...

CVE-2020-7337

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

Design/Logic Flaw

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

PT-2020-19564

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 16 Description The issue allows local administrators to bypass local security protection through McAfee VirusScan Enterprise not correctly integrating with Windows Defender Application...

CVE-2020-7337: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

Mcafee McAfee VirusScan Enterprise Permission License and Access Control Issues Vulnerability

Mcafee VirusScan Enterprise VSE is a suite of antivirus software from the American company Mcafee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability exists in McAfee VirusScan Enterprise 8....

CVE-2020-7337

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

Microsoft SharePoint Server Code Execution

The vulnerability of the Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server packages relates to the loading of code without checking its integrity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...