3350 matches found
KB4338814: Windows 10 Version 1607 and Windows Server 2016 July 2018 Security Update
The remote Windows host is missing security update 4338814. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A remote code execution...
KB4338824: Windows 8.1 and Windows Server 2012 R2 July 2018 Security Update
The remote Windows host is missing security update 4338824 or cumulative update 4338815. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A...
CVE-2018-7779
In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access...
CVE-2018-13000
An XSS issue was discovered in Advanced Electron Forum AEF v1.0.9. A persistent XSS vulnerability is located in the FTP Link element of the Private Message module. The editor of the private message module allows inserting links without sanitizing the content. This allows remote attackers to injec...
Multiple Cisco Products FXOS and UCS Fabric Interconnect Software Input Validation Vulnerabilities
Cisco Firepower 4100 Series Next-Generation Firewall and so on are the products of the American Cisco Cisco company.Cisco Firepower 4100 Series Next-Generation Firewall is a firewall product.UCS 6200 Cisco Firepower 4100 Series Next-Generation Firewall is a firewall product. UCS 6200 Series Fabri...
Eclipse Jetty Elevation of Privilege Vulnerability
Jetty is a pure Java-based web server and Java Servlet container . An elevation of privilege vulnerability exists in Eclipse Jetty versions 9.4.0 through 9.4.8. An attacker can use this vulnerability to access/hijack other HttpSessions and delete mismatched HttpSessions...
DEBIAN-CVE-2018-1333
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 Affected 2.4.18-2.4.30,2.4.33...
Unspecified vulnerability in node-bsdiff-android
node-bsdiff-android is a differential upgrade tool for Android applications. A security vulnerability exists in node-bsdiff-android that originates when the program downloads binary resources over the HTTP protocol. An attacker can exploit the vulnerability to modify or read the downloaded...
xd-testing Remote Code Execution Vulnerability
xd-testing is a set of test libraries for testing applications across devices. A security vulnerability exists in xd-testing that originates when a program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the requested binary with a...
Microsoft Windows 'HTTP.sys' Denial of Service Vulnerability (CNVD-2018-12567)
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. The HTTP protocol stack HTTP.sys is one of the system components used to support applications communicating information through the interfaces it provides. A denial of service...
Microsoft Windows: Service: Microsoft FTP Service
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winftpservice.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Microsoft FTP Service FTPSVC Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
DEBIAN-CVE-2017-5405
Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...
Excerpts from Modern Bank Heists – Non Malware Attack Methods
Carbon Black recently published a report on the latest non-malware attack methods, and how to counteract them. For more information about how Cb Defense, Carbon Black's NGAV + EDR solution, helps enterprises address their endpoint security challenges, check out our weekly Cb Defense Live Demo,...
grunt-ccompiler Man-in-the-Middle Attack Vulnerability
grunt-ccompiler is a Grunt plugin for compiling Closure. A security vulnerability exists in grunt-ccompiler that originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the requested binary with an...
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2018-11080)
IBM InfoSphere Information Server is the market-leading data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform and deliver data and collaborate to bridge the gap between business and IT. An information disclosure vulnerability exists...
CVE-2016-10669
soci downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote...
CVE-2016-10654
sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks...
airbrake module information disclosure vulnerability
The airbrake module is an exception report notification program for use in Node.js. A security vulnerability exists in airbrake module version 0.3.8 and earlier, which stems from the program defaulting to sending environment variables with sensitive values over the HTTP protocol. An attacker can...
CVE-2016-10623
macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker...