2018 Has Been Open Season on Open Source Supply Chains

As the number of open source components used in software supply chains shoot up, hackers are going along for the ride. Increasingly threat actors are planting bad code in open-source repositories in the hopes to harvest the flaws later when used in larger banking, manufacturing and healthcare Dev...

Description of the update package for Communications Server 2007 R2, Web Components: September 2010

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated September 2010.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

JoomScan 0.0.7 - OWASP Joomla Vulnerability Scanner Project

OWASP Joomla! Vulnerability Scanner JoomScan is an open source project, developed with the aim of automating the task of vulnerability detection and reliability assurance in Joomla CMS deployments. Implemented in Perl, this tool enables seamless and effortless scanning of Joomla installations,...

ArchestrA Messaging DoS

The vulnerability of the network service component of the ArchestrA system for message exchange between components is related to an error in pointer arithmetic. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted request...

Microsoft Windows Defender AV: Configure monitoring for incoming and outgoing file and program activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavrealtimescandirection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure monitoring for incoming and outgoing file and program activity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Microsoft Windows Defender AV: Path Exclusions

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavpathexclusions.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Path Exclusions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Description of the cumulative update for Lync Server 2010, Core Components: April 2011

Describes the cumulative update for Lync Server 2010, Core Components that is dated April 2011.SummaryThis article describes the Microsoft Lync Server 2010, Core Components issue that is fixed in the cumulative update for Lync Server 2010, Core Components that is dated April, 2011. This article...

September 11, 2018—KB4457132 (OS Build 10240.17976)

September 11, 2018—KB4457132 OS Build 10240.17976 Applies To Windows 10 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Security updates to Internet Explorer, Microsoft Edge, Microsoft...

September 11, 2018—KB4457129 (Monthly Rollup)

September 11, 2018—KB4457129 Monthly Rollup Applies To Windows 8.1 Windows Server 2012 R2 Improvements and fixes This security update includes improvements and fixes that were a part of update KB4343891 released August 30, 2018 and addresses the following issues: Security updates to Windows media...

CVE-2018-16725: Improper Neutralization of Input During Web Page Generation

An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component."...

DNP3 Implementation Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-13-291-01A DNP3 Implementation Vulnerability that was published November 21, 2013, on the NCCIC/ICS-CERT web site. Adam Crain of Automatak and Chris Sistrunk, Sr. Consultant for Mandiant, reported an improper input...

Android Security Bulletin—September 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Epson iPrint Information Disclosure Vulnerability

EPSON iPrint application for Android is an Android-based remote printing application from Epson Japan. An information disclosure vulnerability exists in version 6.6.3 of the EPSON iPrint application for Android, which stems from the program's use of third-party components such as Box, Dropbox,...

Stack overflow

A stack buffer overflow in NumberingSystem in International Components for Unicode ICU for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2017-15396

A stack buffer overflow in NumberingSystem in International Components for Unicode ICU for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2017-15396

A stack buffer overflow in NumberingSystem in International Components for Unicode ICU for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2017-15396

A stack buffer overflow in NumberingSystem in International Components for Unicode ICU for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-15422

ICU vulnerability CVE-2017-15422: An integer overflow in ICU’s international date handling (ICU for C/C++) enables out-of-bounds memory reads via crafted HTML. Affected: ICU before 60.1; used in Google Chrome’s V8 (pre-63.0.3239.84) and other products. Impact per sources: potential memory disclos...

CVE-2017-15422: Integer Overflow or Wraparound

Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...