6745 matches found
Microsoft Internet Explorer CVE-2017-0040 Scripting Engine Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...
PT-2017-2104
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.x through 2.3.31 Apache Struts versions 2.5.x through 2.5.10 Description The Jakarta Multipart parser in Apache Struts 2 has incorrect exception handling and error-message generation during file-upload attempts, whic...
PT-2017-16798 · Zziplib +3 · Zziplib +3
Name of the Vulnerable Software and Affected Versions: zziplib versions 0.13.56 through 0.13.62 Description: The issue is related to a heap-based buffer overflow in the zzip get32 function, located in the fetch.c file of zziplib. This allows remote attackers to cause a denial of service, resultin...
SSL 3.0 POODLE（CVE-2014-3566）
SSL 3.0 POODLE attack information disclosure VulnerabilityCVE-2014-3566 Release date: 2014-10-14 Update date: 2014-10-16 Affected system: Netscape ssl 3.0 Netscape tls Not affected system: Netscape tls 1.2 Netscape tls 1.1 Netscape tls 1.0 Description: CVECAN ID: CVE-2014-3566 SSL3. 0 is an...
LocalTapiola: Test Page available with Server details on /r/test (viestinta.lahitapiola.fi)
Basic report information Summary: The default test page http://viestinta.lahitapiola.fi/r/test is accessible and presents the Adobe Campaign build info 8705 - not the latest version, and the installed instance name 'ac61tapiola'. Description: Self explanatory. Domain: viestinta.lahitapiola.fi...
New Trojan Turns Thousands Of Linux Devices Into Proxy Servers
"Linux doesn't get viruses" — It's a Myth. A new Trojan has been discovered in the wild that turns Linux-based devices into proxy servers, which attackers use to protect their identity while launching cyber attacks from the hijacked systems. Dubbed Linux.Proxy.10, the Trojan was first spotted at...
Network transmission PayPal is the exposure of"acquaintances can tamper with the password"deadly vulnerability-vulnerability warning-the black bar safety net
! This morning, the security client to the user feedback, the account is a friends login, and show the Bank card and the free password to pay functions can be normal use, very with devices, IP, environmental, geographical location, the truth in the end how? We know almost found on the relevant...
PT-2016-4672
Name of the Vulnerable Software and Affected Versions Debian versions prior to 1.0.9.8.4 Debian unstable versions prior to 1.4beta2 Ubuntu 14.04 LTS versions prior to 1.0.1ubuntu2.17 Ubuntu 16.04 LTS versions prior to 1.2.15ubuntu0.2 Ubuntu 16.10 versions prior to 1.3.2ubuntu0.1 Description The...
Microsoft Office CVE-2016-7264 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2016 for Mac Microsoft Excel Viewer Microsoft Excel fo...
Microsoft Internet Explorer CVE-2016-7278 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...
Microsoft Internet Explorer CVE-2016-7284 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer 10...
Microsoft Office CVE-2016-7290 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...
Microsoft Windows Kernel CVE-2016-7258 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems...
Error session termination mechanisms lead to account hijacking-vulnerability warning-the black bar safety net
Error session termination mechanisms Session termination is to secure the session period in one important aspect. Security implementation session tokens can effectively reduce the session hijacking attack. The session is terminated as the number of attack control mechanisms, such asXSS（cross-site...
PT-2016-3068 · Openssh +7 · Openssh +7
Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 7.4 OpenSSH versions prior to 9.3p2 Description: The issue is related to an untrusted search path vulnerability in the ssh-agent component of OpenSSH, which can be exploited by remote attackers to execute arbitrary...
Microsoft Office CVE-2016-7235 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Windows CVE-2016-3338 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Office CVE-2016-7236 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Windows CVE-2016-3343 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft SQL Server CVE-2016-7249 Privilege Escalation Vulnerability
Description Microsoft SQL Server is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft SQL Server 2016 for x64-based Systems Recommendations Run all software as a nonprivileged user with minimal access...