9847 matches found
PT-2017-16089
Name of the Vulnerable Software and Affected Versions Lenovo Service Framework affected versions not specified Description The issue is related to improper access controls on several Android components in the Lenovo Service Framework application, which can be exploited to enable remote code...
October 16, 2017 – Morning Cyber Coffee Headlines – “National Boss Day” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 16, 2017 - Headlines Carbon Black in the News: Ransomware market...
Cybozu Office Security Bypass Vulnerability (CNVD-2017-30836)
Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 10.0.0 through 10.6.1. The vulnerability can be exploited by an attacker to bypass access restrictions and perform arbitrary operations using the...
The Critical Security Controls: Basic Cybersecurity Hygiene for your Organization
It’s a well-known fact that most successful cyber attacks are easily preventable. That’s because the majority are neither highly sophisticated nor carefully customized. Instead, they are of the “spray and pray” sort. They try to exploit known vulnerabilities for which patches are available, or to...
CVE-2017-9628: Exposure of Sensitive Information to an Unauthorized Actor
An Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD firmware versions prior to 1.28.16 or 1.24.69. In certain circumstances, the device pads Ethernet frames with memory contents...
CVE-2017-9628
The CVE-2017-9628 issue affects Saia Burgess Controls PCD Controllers running PCD firmware older than 1.28.16 or 1.24.69. In certain circumstances, the device pads Ethernet frames with memory contents, leading to information exposure. The exposed component is the PCD Controller firmware, with the...
PT-2017-19085
Name of the Vulnerable Software and Affected Versions Saia Burgess Controls PCD Controllers versions prior to 1.28.16 Saia Burgess Controls PCD Controllers versions prior to 1.24.69 Description An Information Exposure issue was discovered in certain circumstances, where the device pads Ethernet...
GDPR Requirements: Get Started with Classifier
The GDPR requires that organizations exhibit commitment to individuals’ data privacy by implementing a data protection by design and by default approach, meaning organizations need to build privacy and protection into their products, services, and applications. GDPR also mandates that organizatio...
libhevc Code Execution
The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process remotely...
[ASA-201709-22] nvidia: multiple issues
Arch Linux Security Advisory ASA-201709-22 ========================================== Severity: High Date : 2017-09-28 CVE-ID : CVE-2017-6266 CVE-2017-6267 CVE-2017-6272 Package : nvidia Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-418 Summary ======= The package...
Announcing the Windows Defender Advanced Threat Protection ISO 27001 audit assessment report
The security and privacy of customer data are our top priority. Our goals are simple: to operate our services with the security and privacy you expect from Microsoft, and to give you accurate assurances about our security and privacy practices. In line with our commitment to provide customers the...
Gatekeeper Alone Won’t Mitigate Apple Keychain Attack
Apple’s advice to rely on Gatekeeper as a mitigation against a Keychain attack disclosed this week by researcher Patrick Wardle doesn’t fully address the risk. Experts, Wardle included, said that while Gatekeeper is a solid measure in preventing unsigned code from executing on a macOS machine, it...
Achieve Continuous Security and Compliance with the CIS Critical Security Controls
For InfoSec pros, it’s easy to get overwhelmed by the constant noise from cybersecurity industry players — vendors, research firms, consultants, industry groups, government regulators and media outlets. A good antidote for this hyperactive chatter is to refocus on foundational InfoSec practices...
Improper access control
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...
CVE-2017-6266
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...
CVE-2017-6266
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...
CVE-2017-6266
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...
CVE-2017-6266
CVE-2017-6266 affects the NVIDIA GPU Display Driver’s kernel mode layer handler, where improper access controls could allow unprivileged users to cause a denial of service. Connected advisories note related CVEs (6267, 6272) and indicate upstream fixes; for example, Arch Linux ASA-201709-22 fixes...
