Directory traversal

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...

CVE-2017-12285

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...

Cisco Network Analysis Module Parameter Directory Traversal Arbitrary File Deletion Vulnerability

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that i...

Improper access control

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3758

CVE-2017-3758 affects Lenovo Service Framework (LSF) Android components. The vulnerability stems from improper access controls in Android components within LSF, allowing remote code execution. Public sources detail that LSF is an Android framework used to receive push notifications on Lenovo devi...

CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

October 16, 2017 – Morning Cyber Coffee Headlines – “National Boss Day” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 16, 2017 - Headlines Carbon Black in the News: Ransomware market...

Cybozu Office Security Bypass Vulnerability (CNVD-2017-30836)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 10.0.0 through 10.6.1. The vulnerability can be exploited by an attacker to bypass access restrictions and perform arbitrary operations using the...

The Critical Security Controls: Basic Cybersecurity Hygiene for your Organization

It’s a well-known fact that most successful cyber attacks are easily preventable. That’s because the majority are neither highly sophisticated nor carefully customized. Instead, they are of the “spray and pray” sort. They try to exploit known vulnerabilities for which patches are available, or to...

CVE-2017-9628

The CVE-2017-9628 issue affects Saia Burgess Controls PCD Controllers running PCD firmware older than 1.28.16 or 1.24.69. In certain circumstances, the device pads Ethernet frames with memory contents, leading to information exposure. The exposed component is the PCD Controller firmware, with the...

GDPR Requirements: Get Started with Classifier

The GDPR requires that organizations exhibit commitment to individuals’ data privacy by implementing a data protection by design and by default approach, meaning organizations need to build privacy and protection into their products, services, and applications. GDPR also mandates that organizatio...

The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process remotely...

[ASA-201709-22] nvidia: multiple issues

Arch Linux Security Advisory ASA-201709-22 ========================================== Severity: High Date : 2017-09-28 CVE-ID : CVE-2017-6266 CVE-2017-6267 CVE-2017-6272 Package : nvidia Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-418 Summary ======= The package...

Announcing the Windows Defender Advanced Threat Protection ISO 27001 audit assessment report

The security and privacy of customer data are our top priority. Our goals are simple: to operate our services with the security and privacy you expect from Microsoft, and to give you accurate assurances about our security and privacy practices. In line with our commitment to provide customers the...

Gatekeeper Alone Won’t Mitigate Apple Keychain Attack

Apple’s advice to rely on Gatekeeper as a mitigation against a Keychain attack disclosed this week by researcher Patrick Wardle doesn’t fully address the risk. Experts, Wardle included, said that while Gatekeeper is a solid measure in preventing unsigned code from executing on a macOS machine, it...

Achieve Continuous Security and Compliance with the CIS Critical Security Controls

For InfoSec pros, it’s easy to get overwhelmed by the constant noise from cybersecurity industry players — vendors, research firms, consultants, industry groups, government regulators and media outlets. A good antidote for this hyperactive chatter is to refocus on foundational InfoSec practices...

Improper access control

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

CVE-2017-6266

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

CVE-2017-6266

CVE-2017-6266 affects the NVIDIA GPU Display Driver’s kernel mode layer handler, where improper access controls could allow unprivileged users to cause a denial of service. Connected advisories note related CVEs (6267, 6272) and indicate upstream fixes; for example, Arch Linux ASA-201709-22 fixes...