1884 matches found
Microsoft Windows: Prevent users from sharing files within their profile
This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to...
PT-2018-11461
Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager version 10.2.1.603 Description The issue concerns a persistent XSS vulnerability. It can be triggered via an account name on the create token screen, the VfManager.asmx SelectAccounts-DisplayName screen, a...
Microsoft Windows: BitLocker-protected removable drives recovery (wizard)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecoverywizard.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard Authors: Emanuel Mos...
CVE-2018-12903: Improper Neutralization of Input During Web Page Generation
In CyberArk Endpoint Privilege Manager formerly Viewfinity 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts-DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application...
Microsoft Windows: Turn off Internet Connection Wizard (if refers to Microsoft.com)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininetconnectionwizard.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...
Microsoft Windows: Turn off the Order Prints picture task
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winorderprintpictask.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off the "Order Prints" picture task Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...
Microsoft Windows: Turn off the Publish to Web task for files and folders
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnopublishingwizard.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off the "Publish to Web" task for files and folders Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Security Bulletin: TSM Client GUI local hang (CVE-2014-0876)
Summary An IBM Tivoli Storage Manager TSM client local vulnerability can cause the crash or hang of certain Java GUI functions. Vulnerability Details CVE ID: CVE-2014-0876 Description: A local buffer overrun in the IBM Tivoli Storage Manager TSM Windows and Macintosh backup-archive client Java GU...
PrestaShop Attribute Wizard addon code execution vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop. The program provides a variety of payment methods , SMS alerts and product image scaling and other features . Attribute Wizard addon is one of the product attribute add module . A security vulnerability exists in the...
FAQ: XenMobile 10 and NetScaler Gateway Integration
Citrix Endpoint Management, formerly XenMobile Service This article contains frequently asked questions about XenMobile 10 and NetScaler 10.5 Integration. Q:What versions of NetScaler are supported withXenMobile 10 deployment wizard? Q:Do I need to upgrade to NetScaler 10.5 to integratewith...
Design/Logic Flaw
modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...
CVE-2018-10942
modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...
CVE-2018-10942
modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...
CVE-2018-10942
modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...
CVE-2018-10942
CVE-2018-10942 affects the PrestaShop Attribute Wizard addon 1.6.9 (modules/attributewizardpro/file_upload.php) and PrestaShop 1.4.0.1–1.6.1.18. The vulnerability allows remote attackers to execute arbitrary code by uploading a .phtml file. Data from connected documents confirms the attack vector...
CVE-2018-10942: Unrestricted Upload of File with Dangerous Type
modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...
PT-2018-10198
Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.4.0.1 through 1.6.1.18 Attribute Wizard addon version 1.6.9 Description The issue allows remote attackers to execute arbitrary code by uploading a .phtml file through the file upload.php in the Attribute Wizard addon...
Composr CMS Cross-Site Scripting Vulnerability
Composr CMS is an open source content management system CMS developed using HTML, CSS and WCAG technologies. A cross-site scripting vulnerability exists in Composr CMS version 10.0.13. A remote attacker can exploit this vulnerability by sending a page=admin-setupwizard&type=step3 request to...