4850 matches found
Keyboard and Language (IME) Does Not Sync from Local to VDA
When the user configures Receiver for Windows Advanced Preferences Keyboard and Language Bar Set "Keyboard" to Yes; Manual switch from "Chinese" to "English" or user "Ctrl + Shift" to switch input Keyboard and Language does not sync from local to VDA...
Update for Work Folders improvements in Windows 7 SP1
Update for Work Folders improvements in Windows 7 SP1 About this update This update ensures that users are able to continue using Work Folders after they upgrade from Windows 7 SP1 to Windows 10. This update must be applied to the client before the upgrade, in order to maintain the sync partnersh...
CVE-2019-9444
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...
Azure File Sync Agent v10.0 Release – April 2020 (KB4522409)
Update for Azure File Sync agent version 10.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v10.0 Release – April 2020 (KB4522409)
Update for Azure File Sync agent version 10.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v10.0 Release – April 2020 (KB4522409)
Update for Azure File Sync agent version 10.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
March 17, 2020—KB4541331 (OS Build 17763.1131)
None None...
ICU: Integer overflow
Background ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. Description It was discovered that ICU’s UnicodeString::doAppend function is vulnerable to an integer overflow. Please review the CVE identifiers referenc...
[SECURITY] [DLA 2141-1] yubikey-val security update
Package : yubikey-val Version : 2.27-1+deb8u1 CVE ID : CVE-2020-10184 CVE-2020-10185 The following CVEs were reported against yubikey-val. CVE-2020-10184 The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a...
Unspecified Vulnerability in Yubico YubiKey Validation Server
Yubico YubiKey Validation Server is an authentication server from the Swedish company Yubico. A security vulnerability exists in the sync endpoint in YubiKey Validation Server versions prior to 2.40. A remote attacker could exploit the vulnerability to conduct replay attacks using previously used...
D-Link DIR-825 Stack Buffer Overflow Vulnerability
The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A stack buffer overflow vulnerability exists in the httpd binary in the D-Link DIR-825 Rev. B 2.10. An attacker can exploit this vulnerability by sending a POST request to ntpsync.cgi with a sufficiently long parameter...
CVE-2020-10214
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntpsync.cgi with a sufficiently long parameter ntpserver...
CVE-2020-10214
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntpsync.cgi with a sufficiently long parameter ntpserver...
CVE-2020-10185
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...
CVE-2020-10185
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...
UBUNTU-CVE-2020-10185
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...
Default configuration
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...
CVE-2020-10185
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT...
CVE-2020-10185
CVE-2020-10185 affects the YubiKey Validation Server (YubiVal) prior to version 2.40. The vulnerability resides in the sync endpoint, which can be abused by remote attackers to replay previously used one-time passwords. This issue does not affect YubiCloud. The Debian/OSS advisories note fixes im...
