97 matches found
Teradici PCOIP Software Agent 安全漏洞
The Teradici PCoIP Software Agent is part of the Teradici Cloud Access Software from Teradici Canada. A PCoIP client can be used to connect to virtual desktops either directly or through a connection agent. A security vulnerability exists in the Teradici PCOIP Software Agent that could be exploit...
`Frame::copy_from_raw_parts` can lead to segfault without `unsafe`
fn Frame::copyfromrawparts is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may...
Black Hat 2020: In a Turnaround, Voting Machine Vendor Embraces Ethical Hackers
Voting machine-maker Election Systems & Software ES&S has formally announced a vulnerability disclosure policy, Wednesday, during a Black Hat USA 2020 session. The move, which comes with the U.S. presidential elections looming in November, shows that voting-machine vendors are beginning to take t...
Description of the security update for Office 2016: April 14, 2020 (KB4484287)
None None...
CVE-2020-0556
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access...
Elasticsearch files access
snapshot API files access...
PCI DSS Compliance : Remote Access Software Has Been Detected
Due to increased risk to the cardholder data environment when remote access software is present, 1 justify the business need for this software to the ASV and confirm it is implemented securely, or 2 confirm it is disabled/ removed. Consult your ASV if you have questions about this Special Note...
CVE-2007-4785: Undefined Security Weakness
Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a driver that hides a directory under %WINDIR%, which might allow remote attackers to bypass malware detection by placing files in this directory...
CVE-2007-2637
MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors...
WebArchiveX ActiveX component unaauthorized access
Insecure methods are available through 'safe for scripting' component...
Vulnerability in 3Com 3CServer v1.1
Object: Vulnerability in 3CServer v1.1, free utility for windows32, from 3Com. Details: While old, this free utility is still proposed from the 3Com site, so it's worth mentionning this. There are buffer overflows in many of the FTP commands supported, leading to various heap overflows. The...
[SA12652] LessTif XPM Library Image Decoding Vulnerabilities
TITLE: LessTif XPM Library Image Decoding Vulnerabilities SECUNIA ADVISORY ID: SA12652 VERIFY ADVISORY: http://secunia.com/advisories/12652/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: LessTif 0.x http://secunia.com/product/3956/ DESCRIPTION: Multiple...
linux execve() unauthorized executable file access
During new application invocation through execve there is a race condition than parent application can access new discriptor for executable file...
KaZaA crossite access
All advirtizing is executed in local zone...
Linksys routers unauthorized access
XML parsing hole allows unauthorized web interface access...
Доступ к любым файлам через Entrust GetAccess (unauthorized access)
Пользователь может получить любой файл выбрав его в качестве локализованной версии справки...
Несанкционированный доступ к файлам в Novell Groupwise (unauthorized access)
No description provided...
Несанкционированный доступ через PHPNuke (unauthorized access)
Можно скопировать и получть доступ к любому файлу...