118 matches found
CVE-2017-2149: Untrusted Search Path
Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card wit...
PT-2017-15213
Name of the Vulnerable Software and Affected Versions SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool versions V1.00.03 and earlier SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software versions V3.0.2 and earlier SDHC Memory Card wit...
JVN#05340816: Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries
Multiple installers of Toshiba memory card related software contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installe...
FreeBSD -- Multiple libarchive vulnerabilities
Problem Description: Flaws in libarchive's handling of symlinks and hard links allow overwriting files outside the extraction directory, or permission changes to a directory outside the extraction directory. Impact: An attacker who can control freebsd-update's or portsnap's input to tar1 can chan...
Samsung SW Update Tool Information Disclosure Vulnerability
Samsung SW Update Tool is a set of system update tools from Samsung South Korea. A remote information disclosure vulnerability exists in Samsung SW Update Tool version 2.2.5.16. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack and obtain sensitive information...
Samsung SW Update Tool Security Bypass Vulnerability
Samsung SW Update Tool is a set of system update tools from Samsung South Korea. A security bypass vulnerability exists in Samsung SW Update Tool version 2.2.5.16. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Samsung Windows Laptop Owners Urged To Download Fix To MitM Vulnerability
Samsung laptop owners are being urged to update their Windows PCs after the discovery of a vulnerability that can allow remote attackers to download files onto a targeted system and gain complete control over the laptop. The flaw is tied to a feature called “Samsung SW Update Tool 2.2.5.16”...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-update-tool package of the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-update-tool package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Mandriva Update for rpmdrake MDKA-2007:062 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDKA-2007:062 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Ubuntu: Security Advisory (USN-412-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for geoip vulnerability USN-412-1
Ubuntu Update for Linux kernel vulnerabilities USN-412-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4121.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for geoip vulnerability USN-412-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu 5.10 / 6.06 LTS / 6.10 : geoip vulnerability (USN-412-1)
Dean Gaudet discovered that the GeoIP update tool did not validate the filename responses from the update server. A malicious server, or man-in-the-middle system posing as a server, could write to arbitrary files with user privileges. Note that Tenable Network Security has extracted the preceding...
ROS-2-4306
2.4306 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. For inquiries regarding the purchase of new installation kits including a...
ROS-2-3031
2.3031 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...
May 2010 cumulative time zone update for Windows operating systems
None None...
Simplified Chinese Systems Management Servers Service Pack 2
Microsoft Systems Management Server SMS 2003 Service Pack 2 SP2 主要是大量 SMS 2003 热修补程序的汇总,但是还介绍了对受支持配置所做的一些更改,并扩大了允许的配置的范围。此外,SMS 2003 SP2 包括增加的对可用性、安全性以及性能的改善。 重要信息:如果在已经将站点更新为 SMS 2003 SP2 之后计划安装 Inventory Tool for Microsoft Updates,则必须使用为 SP2 设计的版本。该版本随附在 SP2 中,但是在默认情况下不会安装。也可以从下面的链接下载该版本。...