5709 matches found
#StopRansomware: Cuba Ransomware
Summary Actions to take today to mitigate cyber threats from ransomware: ā¢ Prioritize remediating known exploited vulnerabilities. ā¢ Train users to recognize and report phishing attempts. ā¢ Enable and enforce phishing-resistant multifactor authentication. Note: This joint Cybersecurity Advisory C...
Update VPN Plus Server now! Synology patches vulnerability with a CVSS of 10
Synology has issued an advisory about a vulnerability that allows remote attackers to execute arbitrary commands through a susceptible version of Synology VPN Plus Server. VPN Plus Server VPN Plus Server allows users to turn their Synology Router into a Virtual Rrivate Network VPN server. A VPN...
Synology Releases Patch for Critical RCE Vulnerability Affecting VPN Plus Servers
Synology has released security updates to address a critical flaw impacting VPN Plus Server that could be exploited to take over affected systems. Tracked as CVE-2022-43931, the vulnerability carries a maximum severity rating of 10 on the CVSS scale and has been described as an out-of-bounds writ...
CVE-2022-43931
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2022-43931
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors...
Cross site scripting
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2022-43931
CVE-2022-43931 is an out-of-bounds write vulnerability in the Remote Desktop feature of Synology VPN Plus Server. Affected: VPN Plus Server for SRM 1.2 up to 1.4.3-0534 and SRM 1.3 up to 1.4.4-0635. Impact: remote attackers could execute arbitrary commands via unspecified vectors (CVSS 10 in disc...
CVE-2022-43931
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors...
SUSE SLES15 Security Update : xrdp (SUSE-SU-2023:0012-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0012-1 advisory. - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23479: Fixed a buffer overflow in...
Synology VPN Plus Server ē¼å²åŗéčÆÆę¼ę“
Synology VPN Plus Server is a product of Synology, a Chinese company, which is used to turn Synology Router into an advanced virtual private network server. A buffer error vulnerability exists in Synology VPN Plus Server version 1.2 up to and including 1.4.3-0534, 1.3 up to and including...
The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller), as well as Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway), stems from insufficient verification of data authenticity. This allows attackers to gain access to servers configured in RDP proxy mode.
The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to insufficient data authentication checks. Exploiting this...
PT-2022-18144 Ā· Devolutions Ā· Devolutions Remote Desktop Manager
Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2022.1 Description: The issue allows information disclosure via a password brute-force attack due to weak password derivation for export. An error caused base64 to be decoded, potentially...
CVE-2022-26964
The CVE-2022-26964 entry concerns Devolutions Remote Desktop Manager prior to version 2022.1, where weak password derivation for export enables information disclosure via a password brute-force attack. The underlying issue is an error that causes base64 to be decoded, contributing to the weakness...
Devolutions Remote Desktop Manager å®å Øę¼ę“
Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager versions prior to 2022.1. An attacker could exploit this vulnerability to disclose information v...
CVE-2022-26964
Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded...
FreeBSD : freerdp -- multiple vulnerabilities (1f0421b1-8398-11ed-973d-002b67dfc673)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1f0421b1-8398-11ed-973d-002b67dfc673 advisory. - FreeRDP is a free remote desktop protocol library and clients. In affected versions there is...
Fedora 36 : xrdp (2022-08d2138578)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-08d2138578 advisory. Release notes for xrdp v0.9.21 2022/12/10 General announcements - Running xrdp and xrdp-sesman on separate hosts is still supported by this release,...
Fedora 35 : freerdp (2022-e733724edb)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e733724edb advisory. Update to 2.8.1 CVE-2022-39282, CVE-2022-39283. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
CVE-2022-4287
Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application...
Authentication flaw
Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application...