1450 matches found
CVE-2018-11002: Incorrect Permission Assignment for Critical Resource
Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions...
CVE-2018-15832
upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI...
CVE-2018-15832
CVE-2018-15832 affects Ubisoft Uplay Desktop Client (upc.exe) version 63.0.5699.0, where the vulnerability arises from improper validation of a user-supplied string used in a system call during URI handling. This allows remote code execution under the current process context. Exploitation require...
PT-2018-13224
Name of the Vulnerable Software and Affected Versions Ubisoft Uplay Desktop Client version 63.0.5699.0 Description The issue is related to the processing of URI handlers in the upc.exe component. It results from the lack of proper validation of a user-supplied string before using it to execute a...
CVE-2018-15832: Improper Input Validation
upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI...
Security Bulletin: Aspera HSTS, HSTE and Desktop Client application is affected by openSSL vulnerabilities (CVE-2018-0739)
Summary Aspera High-Speed Transfer Server formerly known as Enterprise Server and Connect Server, High-Speed Transfer Endpoint formerly known as Point-to-Point Client and Desktop Client application have addressed the following openSSL vulnerabilities. Vulnerability Details CVEID: CVE-2018-0739...
Security Bulletin: Aspera HSTS, HSTE and Desktop Client application is affected by openSSL vulnerabilities (CVE-2017-3738)
Summary Aspera High-Speed Transfer Server formerly known as Enterprise Server and Connect Server, High-Speed Transfer Endpoint formerly known as Point-to-Point Client and Desktop Client application have addressed the following openSSL vulnerabilities. Vulnerability Details CVEID: CVE-2017-3738...
CVE-2018-16261
In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust...
PT-2018-13456
Name of the Vulnerable Software and Affected Versions Pulse Secure Pulse Desktop Client versions 5.3RX before 5.3R5 Pulse Secure Pulse Desktop Client version 9.0R1 Description The issue is related to a Privilege Escalation Vulnerability with Dynamic Certificate Trust. Recommendations For Pulse...
CVE-2018-16261: Improper Certificate Validation
In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust...
Security Bulletin: TLS padding vulnerability affects IBM Rational RequisitePro (CVE-2014-8730)
Summary Transport Layer Security TLS padding vulnerability via a POODLE Padding Oracle On Downgraded Legacy Encryption like attack affects IBM Rational RequisitePro. Vulnerability Details CVE-ID: CVE-2014-8730 Description: IBM Rational RequisitePro could allow a remote attacker to obtain sensitiv...
Privilege escalation
Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker t...
uTorrent Users Warned of Remote Code Execution Vulnerability
Google Project Zero researchers are warning of two critical remote code execution vulnerabilities in popular versions of BitTorrent’s web-based uTorrent Web client and its uTorrent Classic desktop client. According to researchers, the flaws allow a hacker to either plant malware on a user’s...
CVE-2017-14586
Summary: CVE-2017-14586 affects Hipchat for Mac desktop client versions 4.0 up to 4.29.x. The vulnerability arises from how video call links are parsed, enabling client-side remote code execution. The issue is documented as affecting 4.0–
[SECURITY] Fedora 25 Update: remmina-1.2.0-0.39.20170724git0387ee0.fc25
Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...
Mail.ru: Gain access to random information via group chat "about" property
Vulnerability based on unfiltered size of data in "about" field. In case when data length stored in "about" field is more than 2^16 for example payload is 65537"A" server will return payload with additional suffix with random information. The size of suffix is increase with size of payload...
PostgreSQL Administration Tool pgAdmin 4 XSS vulnerabilities found and use-vulnerability and early warning-the black bar safety net
This article I'm going to tell you how I find and use pgAdmin4 desktop clientXSSvulnerabilities. In reading this article, please upgrade as soon as possible to 1. 4 version. Foreword Since I am a hand inadvertently to a new MacBookPro on that big ridiculously Touchpad, pgAdmin 4 page constantly...
CVE-2016-7614
An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors...
ownCloud: HTML injection in Desktop Client
Problem There are HTML injections throughout the ownCloud desktop client. A good example of this can be seen in accountsettings.cpp line 641 to 705. For reference purposes this is a trimmed down and slightly commented version of the code: cpp void AccountSettings::refreshSelectiveSyncStatus QStri...
