MS15-128: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 in Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 8, 2015

MS15-128: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 in Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET...

Cellebrite UFED 7.29 Hardcoded ADB Authentication Keys

KL-001-2020-001 : Cellebrite Hardcoded ADB Authentication Keys Title: Cellebrite Hardcoded ADB Authentication Keys Advisory ID: KL-001-2020-001 Publication Date: 2020.04.13 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2020-001.txt 1. Vulnerability Details Affected Vendor...

MS15-128: Description of the security update for the .NET Framework 3.5 in Windows 8 and Windows Server 2012: December 8, 2015

MS15-128: Description of the security update for the .NET Framework 3.5 in Windows 8 and Windows Server 2012: December 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code...

wolfssl

This is a collection of files related to the wolfSSL library, a cryptographic library for embedded systems. The library is designed to be compatible with Arduino projects and provides a range of cryptographic functions, including SSL/TLS, RSA, and AES. The files include: IDE/ARDUINO/README.md: A...

VulnCheck KEV: CVE-2019-19752

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io...

The vulnerability of the embedded software in Balt-System NC series numerical control systems, related to the transmission of data in an open format, allows attackers to intercept traffic and disclose confidential information.

The vulnerability of the embedded software in Balt-System NC series numerical control systems is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to intercept traffic and disclose confidential information...

The vulnerability of the NTLMv1 network protocol implementation in the embedded software of Balt-System NC series numerical control systems allows a hacker to obtain information about the operator’s account credentials.

The vulnerability of the NTLMv1 network protocol implementation in the built-in software of Balt-System NC numerical control systems is related to a reversible one-way hash function. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain information about the operator’...

VulnCheck KEV: CVE-2019-19751

easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io...

The vulnerability of the embedded software in Balt-System NC series numerical control systems is related to insufficient resources, which allows a malicious actor to cause malfunctions in the system’s operation.

The vulnerability of the embedded software in Balt-System NC series numerical control systems is related to insufficient resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending a large number of specially crafted network packets SYN flood attack...

An update that prevents a "0xC0000034" error message when you try to install Windows 7 SP1, Windows Server 2008 R2 SP1, or Windows Embedded Standard 7 SP1 is available

An update that prevents a "0xC0000034" error message when you try to install Windows 7 SP1, Windows Server 2008 R2 SP1, or Windows Embedded Standard 7 SP1 is available Symptoms Note This article replaces Knowledge Base article 976902. Important This article describes a hotfix that prevents the...

F2fs-tools fsck.f2fs sanity_check_area_boundary code execution vulnerability

Summary An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

CVE-2019-19912

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...

[SECURITY] Fedora 31 Update: php-7.3.16-1.fc31

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

[SECURITY] Fedora 32 Update: php-7.4.4-1.fc32

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Exclusion of Citrix embedded browser from the Citrix Workspace app 1912 LTSR for Windows

The Citrix Workspace app Long Term Service Release LTSR is released on a less frequent cadence with an extended lifecycle than the Workspace app Current Releases CR, offering predictability and less changes to the product. The Citrix Workspace app LTSR offers Cumulative Updates CU that contain...

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2020-1307)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus

Summary Multiple security vulnerabilities exist in the IBM® Runtime Environment Java™ Technology Edition 6.0.16.16 and earlier used by WebSphere Message Broker and the IBM® Runtime Environment Java™ Technology Edition 7.0.9.20 and earlier or 7.1.3.20 and earlier used by IBM Integration Bus. These...

EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2020-1307)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE component of Oracle Java SE subcomponent: JCE. The supported version that is affected is Java SE: 8u212...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2020-2593 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Networking component could allow an unauthenticated...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2019-2981 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cau...