JVN#79301396: Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries

Susie plug-in "axpdfium" contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user running the program where "axpdfium" is used. Solution Update the plug-in Update the plug-...

MiniUPnP ngiflib DecodeGifImg' Function Denial of Service Vulnerability

MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability exists i...

DeviceLock Plug and Play Auditor Buffer Overflow Vulnerability

DeviceLock Plug and Play Auditor freeware is a plug-and-play device scanning program from DeviceLock, Inc. that scans devices that have been or are being accessed by hosts on the LAN. A buffer overflow vulnerability exists in the DLPnpAuditor.exe file in version 5.72 of DeviceLock Plug and Play...

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

CVE-2018-10655

The CVE-2018-10655 entry affects DeviceLock Plug and Play Auditor (DLPnpAuditor.exe) v5.72 (freeware). The vulnerability is a Unicode buffer overflow (SEH) in DLPnpAuditor.exe triggered by a specially crafted text file used with the “scan network” option, enabling arbitrary code execution on the ...

CVE-2018-8914

SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID parameter...

PT-2018-10034

Name of the Vulnerable Software and Affected Versions DeviceLock Plug and Play Auditor version 5.72 Description The issue is related to a Unicode Buffer Overflow in the DLPnpAuditor.exe component. This can potentially lead to a Structured Exception Handler SEH overflow. Recommendations For...

CVE-2018-10655: Improper Restriction of Operations within the Bounds of a Memory Buffer

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

DeviceLock Plug And Play Auditor 5.72 Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DEVICELOCK-PLUG-PLAY-AUDITOR-v5.72-UNICODE-BUFFER-OVERFLOW.txt + ISR: Apparition Security Vendor: ======== https://www.devicelock.com/freeware.html/ Product: ======== DeviceLock Plug and...

DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow (SEH)

DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow SEH Exploit Title: DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow SEH Date: 2018-05-04 Exploit Author: Youssef mami Vendor Homepage: https://www.devicelock.com/freeware.html/ Version: 5.72 CVE : CVE-2018-10655 Securi...

Microsoft Windows 10: Load and unload device drivers

This policy setting determines which users can dynamically load and unload device drivers. This user right is not required if a signed driver for the new hardware already exists in the driver.cab file on the device. Device drivers run as highly privileged code. Windows supports the Plug and Play...

FreeBSD : chromium -- vulnerability (36ff7a74-47b1-11e8-a7d6-54e1ad544088)

Google Chrome Releases reports : 62 security fixes in this release : - 826626 Critical CVE-2018-6085: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-28 - 827492 Critical CVE-2018-6086: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-30 - 813876 High...

elixir-security-advisories

Deprecation Notice This repo was created before the GitHub Se...

Apache Struts Denial of Service Vulnerability (CNVD-2018-06540)

Struts2 is Apache Software Foundation is responsible for maintaining a MVC-based design pattern of the Web application framework for open source projects . A denial of service vulnerability exists in Apache Struts2. Due to the Apache Struts2 REST plug-in , the use of XStream component on the XML...

The Firmware Analysis and Comparison Tool: FACT

The Firmware Analysis and Comparison Tool formerly known as Fraunhofer’s Firmware Analysis Framework FAF is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analysis. Additionally, it can compare several images or single files...

Multiple Cross-Site Scripting Vulnerabilities in Micro Focus Identity Manager and iManager Identity Manager Plug-in

Micro Focus Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the basis for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. iManager is one of the WEB-based application. Y...

Solaris 10 (x86) : 138536-01

Service Provisioning System 6.0: N1 SPS Webserver 7 Plug-in Patch. Date this patch was last updated by Sun : Jul/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Design/Logic Flaw

Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation...