13029 matches found
USN-4623-1 pacemaker vulnerability
Ken Gaillot discovered that Pacemaker incorrectly handled IPC communications permissions. A local attacker could possibly use this issue to bypass ACL restrictions and execute arbitrary code as root...
chromium-browser: Stack buffer overflow in WebRTC
Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet...
Denial of Service Vulnerability in Honeywell DCS C300 Controller (CNVD-2020-67879)
The CC-PCNT02 is a controller for Honeywell DCS C300 systems that supports Ethernet communication. A denial of service vulnerability exists in the Honeywell DCS C300 controller that can be exploited by an attacker to cause a denial of service...
CVE-2020-3556
A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious script. The vulnerability is due to a lack of authentication to the IPC listene...
CVE-2020-27123
A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. ...
Design/Logic Flaw
A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious script. The vulnerability is due to a lack of authentication to the IPC listene...
CVE-2020-27123
CVE-2020-27123 affects Cisco AnyConnect Secure Mobility Client for Windows. A vulnerability in the Interprocess Communication (IPC) channel, due to an exposed IPC function, lets an authenticated, local attacker craft an IPC message to the AnyConnect process to read arbitrary files on the underlyi...
CVE-2020-27123 Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability
A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. ...
File Upload Vulnerability in Microconsultation Communication System of Beijing Zhongwang Network Technology Co.
Founded in 2010 and headquartered in Beijing Zhongguancun Science and Technology Park, Beijing Zhongwang Network Technology Co., Ltd. is a high-tech enterprise dedicated to the research, development and innovation of multimedia communication technology. A file upload vulnerability exists in Beiji...
Microsoft recognized as a Leader in the 2020 Gartner Magic Quadrant for Enterprise Information Archiving
Organizations face an increasing volume of data generated daily and ever-evolving regulations around how that data is managed. To help navigate this complex information landscape, we are focused on delivering integrated, intelligent, and user-centric solutions. Over the past few years, we...
Microsoft recognized as a Leader in the 2020 Gartner Magic Quadrant for Enterprise Information Archiving
Organizations face an increasing volume of data generated daily and ever-evolving regulations around how that data is managed. To help navigate this complex information landscape, we are focused on delivering integrated, intelligent, and user-centric solutions. Over the past few years, we...
chromium-browser: Use after free in WebRTC
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. An arbitrary file read vulnerability exists in the Interprocess Communication IPC channel of Cisco AnyConnect Secure...
Countering a Home Invasion: Modernizing Threat Hunting Best Practices
The recently released VMware Carbon Black Global Incident Threat Report found that incidents of counter incident response IR are occurring in 82 percent of IR engagements. Counter IR involves several tactics, which include: disabling anti-malware scan interface, clearing/deleting logs, using...
CVE-2020-27123
A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. ...
DEBIAN-CVE-2020-15970
Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
DEBIAN-CVE-2020-15969
Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2020-15970
Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...