4435 matches found
Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability in Adobe AIR allows an attacker to execute arbitrary code or cause a service failure a memory-related error...
Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libuim-nox-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using the JAX-WS subcomponent...
The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure or otherwise affect the system.
A vulnerability in the Google Chrome browser, related to errors in Google V8 JavaScript. Exploiting this vulnerability allows a malicious actor to trigger a service failure or cause other adverse effects on the system...
The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure
Cisco IOS software contains numerous implementation errors in the Session Initiation Protocol SIP. When these errors are exploited during operation, a fault with ID CSCth03022 can be triggered, along with a “service failure” of the router...
The vulnerability of the Apache Qpid message exchange system, which allows a malicious actor to gain access as a legitimate user.
The Apache Qpid system for exchanging programmatic messages contains a vulnerability related to an authentication error during the processing of shadowed connections for AMQP clients. With a specially crafted request, a malicious individual can impersonate a legitimate user...
The vulnerability of the Jrockit software platform allows a malicious individual to compromise data confidentiality and integrity.
The vulnerability of the Jrockit platform, related to its subcomponents. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality and integrity by using the Beans subcomponent...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Pwned by Vpon
Vpon is one of many mobile ad SDKs marketed towards mainland Chinese and Taiwanese developers and app users. Recently, FireEye mobile security researchers identified a branch of Vpon ad SDK on iOS containing code that allows a malicious actor be it the app developer or the SDK creator to remotely...
APT Group Sends Spear Phishing Emails to Indian Government Officials
Introduction On May 18, 2016, FireEye Labs observed a suspected Pakistan-based APT group sending spear phishing emails to Indian government officials. This threat actor has been active for several years and conducting suspected intelligence collection operations against South Asian political and...
The vulnerability of the Android operating system, which allows a hacker to circumvent existing access restrictions
The vulnerability in the server/TetherController.cpp file of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions through a specially created application...
Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks
In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and execut...
Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks
In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and execut...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
The vulnerability of the Safari browser, which allows a hacker to replace the user interface
The vulnerability of Safari browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the user interface through a web page that replaces the actual text...
The vulnerability of the Safari browser, which allows a hacker to track users
The vulnerability of the Top Sites function in the Safari browser is related to improper storage of cookie files. Exploiting this vulnerability can allow a malicious actor to remotely track users...
The vulnerability of the server operating system OS X Server, which allows a hacker to break the cryptographic security mechanism
The vulnerability of the Web Server component of the OS X Server operating system is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a malicious actor to compromise the cryptographic security mechanisms...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures
The multiple vulnerabilities of the Google V8 browser component in Google Chrome are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to cause service failures or potentially have other adverse effects...