PT-2019-2946 · Cisco · Cisco Webex Network Recording Player +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute...

CVE-2018-17696

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17674

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Cisco Webex Network Recording Player and Webex Player for Windows Buffer Overflow Vulnerability (CNVD-2019-02788)

Cisco Webex Business Suite WBS32 sites, etc. are video conferencing solutions from Cisco USA.Cisco Webex Network Recording Player and Webex Player are among the players used to play video conference recordings. A buffer overflow vulnerability exists in the Windows-based Cisco Webex Network...

Format string

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1637

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2019-1638

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

The vulnerability of the IIoT Monitor platform, related to the lack of restrictions on file uploads, allows attackers to upload and execute malicious files.

The vulnerability of the IIoT Monitor platform lies in the lack of restrictions on file uploads. Exploiting this vulnerability allows a remote attacker to upload and execute malicious files, which can be automatically processed within the product environment...

CVE-2019-0017

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1...

Formjacking Campaign Suspicious JavaScript

Some Web sites include heavily-obfuscated JavaScript code with hidden redirection. Hidden redirection can cause unintended browser behavior which can lead to downloading malicious files. Successful exploitation could allow attackers to execute arbitrary code on the target...

IIoT Monitor Dangerous Type File Upload Vulnerability

Schneider Electric IIoT Monitor is an industrial IoT monitor from Schneider Electric France. A security vulnerability exists in Schneider Electric IIoT Monitor version 3.1.38. The vulnerability can be exploited by an attacker to upload and execute malicious files...

CVE-2018-7836

An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files...

CVE-2018-7836

An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files...

Adobe Acrobat Pro DC HTML2PDF HTML Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Emotet Trojan Detection

The script tries to detect the Emotet Trojan via various known Indicators of Compromise IOC. Note: This script is not running by default as it needs to crawl the target host for various files which puts high load on the target during the scan. Please enable it separately within scripts preference...

CVE-2018-19568

A floating point exception in kodakradcloadraw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

CVE-2018-19567

A floating point exception in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code...

CVE-2018-19566

A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information...

CVE-2018-19565

A buffer over-read in cropmaskedpixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information...

Sql injection

Norton prior to 22.15; Symantec Endpoint Protection SEP prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition SEP SBE prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud SEP Cloud prior to 22.15.1 may be susceptible to an AV bypass...