CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

CVE-2021-26025

CVE-2021-26025 affects ACDSee Professional 2021 (version 14.0.1721). The vulnerability is a User Mode Write Access Violation in PlugIns\IDE_ACDStd.apl triggered by a crafted BMP image, starting at IDE_ACDStd!zlibVersion+0x4e5e. Exploitation context: local access, low attack complexity, no authent...

CVE-2021-26026

CVE-2021-26026 affects ACDSee Professional 2021 (version 14.0 build 1721). The vulnerability is a User Mode Write Access Violation in the IDE_ACDStd.apl component, triggered by a crafted BMP image, with the fault location reported as IDE_ACDStd!JPEGTransW+0x... The CVE is documented across multip...

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM WebSphere Cast Iron Solution & App Connect Professional These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. IBM WebSphere Cast Iron Solution & App Connect Professional has addressed the applicable...

Security Bulletin: App Connect Professional is affected by Apache Tomcat vulnerabilities.

Summary App Connect Professional has addressed the following vulnerabilities reported in Apache Tomcat. Vulnerability Details CVEID: CVE-2020-13943 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a flaw when HTTP/2 client exceeded the agreed...

MSPs, have you picked the right PSA for you yet?

Not long ago, we helped MSPs pick the right remote monitoring and management RMM platform for them, and make it an essential part of their service toolkit. As you may recall, an RMM is a tool that helps MSPs do the work. And what better way to track the work—and other elements associated with...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-03293)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used office software text, tables, presentations, PDF reading and other functions. A memory corruption vulnerability exists in WPS Office Professional Edition, which...

Memory Corruption Vulnerability in WPS Office Professional

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. A memory corruption vulnerability exists in WPS Office Professional, which can be exploited by attacker...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01310)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. A memory corruption vulnerability exists in WPS Office Professional, which can be exploited by attacker...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01306)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. A memory corruption vulnerability exists in WPS Office Professional, which can be exploited by attacker...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01305)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. A memory corruption vulnerability exists in WPS Office Professional, which can be exploited by attacker...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01312)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. A memory corruption vulnerability exists in WPS Office Professional, which can be exploited by attacker...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Cast Iron & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in January 2020 have been addressed the applicable CVEs Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An...

The story of the year: remote work

The coronavirus pandemic has caused sudden, sweeping change around the world. The necessary social distancing measures are having an impact on all of us. One large part of society that has been affected by these measures more than others is the employed. While direct customer facing businesses li...

CVE-2020-29595

PlugIns\IDEACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDEACDStd!JPEGTransW+0x00000000000031aa...

CVE-2020-29595

CVE-2020-29595 affects ACDSee Photo Studio Studio Professional 2021 (v14.0 Build 1705). A vulnerability in the PlugIns\IDE_ACDStd.apl component (JPEGTransW function) allows a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x…; CVSS metrics in the initial data indicate high/critical impact (...

Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

Sound security budget planning and execution are essential for CIO's/CISO's success. Now, for the first time, the Ultimate Security Budget Plan and Track Excel template download here provide security executives a clear and intuitive tool to keep track of planned vs. actual spend, ensuring that...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Cast Iron & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in July 2020 have been addressed the applicable CVEs Vulnerability Details CVEID: CVE-2020-14621...

Canon Inkjet Extended Survey Program 5.1.0.8 - 'IJPLMSVC.EXE' - Unquoted Service Path

Exploit Title: Canon Inkjet Extended Survey Program 5.1.0.8 - 'IJPLMSVC.EXE' - Unquoted Service Path Discovery by: Carlos Roa Discovery Date: 2020-11-07 Vendor Homepage: https://www.usa.canon.com/internet/portal/us/home Tested Version: 5.1.0.8 Vulnerability Type: Unquoted Service Path Tested on O...