2432 matches found
Keyboards Fail to Map in ICA Sessions From Non-Windows Receivers such as Mac, Linux and HTML5
After an in-place upgrade of Remote PC VDA's from version 5.6.400 to 7.6.300 keyboards would fail to map in ICA sessions from non-Windows Receivers such as Mac, Linux, and HTML5...
RLE Protocol Converter FDS-PC and FDS-PC-DP Web Server Cross-Site Scripting Vulnerability
RLE Protocol Converter FDS-PC and FDS-PC-DP are protocol converters. web server is one of the web servers. A cross-site scripting vulnerability exists in the web server in RLE Protocol Converter FDS-PC and FDS-PC-DP version 2.1. A remote attacker can exploit this vulnerability to inject malicious...
pc-plus.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-568512 Description| Value ---|--- Affected Website:| pc-plus.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-7278
The CVE-2018-7278 entry affects RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. The vulnerability is a persistent XSS in the web server, exploitable by remote attackers through the device’s BACnet implementation to inject arbitrary JavaScript. This is described across multiple sources (NVD...
CVE-2018-7278
An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP...
Two Nasty Outlook Bugs Fixed in Microsoft’s Feb. Patch Tuesday Update
Microsoft issued 50 security fixes as part of its February Patch Tuesday release, covering vulnerabilities in Windows, Office, Internet Explorer, Edge and its JavaScript engine ChakraCore. Fourteen of the vulnerabilities are labeled as critical, 34 as important and two as moderate. Two notable...
Qualys Cloud Suite 8.12 New Features
This new release of the Qualys Cloud Suite, version 8.12 adds new reporting options for the PC Report, allowing you to include new summaries in the remediation section of the report for control failures. Feature Highlights Qualys Policy Compliance PC/SCAP PC Report: Failure Summary Section – You...
Polygonize PC 1.1 Remote Command Execution
============================================================================================================================ | Title : Polygonize PC v1.1 RCE Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : 1.1 | |...
Fortinet Installer Client 5.6 DLL Hijacking
Affected Product: Fortinet Installer Client 5.6 for Windows PC Credit: Souhardya Sardar and Rohit Bankoti Contact : github.com/Souhardya Summary: Fortinet Installer contains a privilege escalation vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the...
CVE-2017-10909
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-10909
CVE-2017-10909 is a DLL search path (CWE-427) vulnerability in the Music Center for PC installer. Affected versions are 1.0.01 and earlier. The issue allows arbitrary code execution with the privileges of the user invoking the installer due to insecurely loading DLLs from an unspecified directory...
CVE-2017-10909
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
JVN#60695371: The installer of Music Center for PC may insecurely load Dynamic Link Libraries
Music Center for PC provided by Sony Video & Sound Products Inc. is a file management tool. The installer of Music Center for PC contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privileg...
EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2017-1321)
According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Quick Emulator QEMU, compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The...
Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Amazon Audible DLL Hijacking
Aloha, Introduction: Vendor: Amazon Affected Product: Audible Software for Windows PC Fixed in: Latest Version released by the vendor Vendor Website: https://www.audible.com/ Vulnerability Type: Privilege Escalation CVE: CVE-2017-17069 Credit: Himanshu Mehta @LionHeartRoxx Summary: Audible contai...
Sony Music Center for PC Untrustworthy Search Path Vulnerability
Sony Music Center for PC is a PC-based music player from Sony Japan. An untrusted search path vulnerability exists in Sony Music Center for PC version 1.0.00. The vulnerability can be exploited to gain privileges via a malicious DLL in a directory...