15929 matches found
[SECURITY] Fedora 28 Update: opensc-0.19.0-1.fc28
OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the PKCS11 API so...
LayerBB Forum 1.1.1 - search_query SQL Injection Vulnerability
Exploit for php platform in category web applications...
RHEL 6 / 7 : Red Hat JBoss Web Server 5.0 Service Pack 1 (RHSA-2018:2868)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2868 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...
Authorization
Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update
An update is now available for Red Hat JBoss Web Server 5.0 for RHEL 6 and Red Hat JBoss Web Server 5.0 for RHEL 7. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Microsoft Office: Bind to object
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officebindtoobject.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Bind to object Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
Microsoft Office: Disable user name and password
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officedisableusernamepasswd.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable user name and password Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...
Security Bulletin: Vulnerability in RC4 stream cipher affects Rational Functional Tester's Extension for Terminal-based Applications (CVE-2015-2808)
Summary The RC4 "Bar Mitzvah" attack may affect "Extension for Terminal-based Applications" a.k.a FTE that are shipped with Rational Functional Tester. Vulnerability Details CVEID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote...
UBUNTU-CVE-2018-4361
A memory consumption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
UBUNTU-CVE-2018-4207
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks...
The compatibility subsystem’s vulnerability allows for the execution of Linux applications on Windows operating systems, enabling attackers to replace or delete any files they desire.
The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems is related to errors in character registry handling. Exploiting this vulnerability allows an attacker to replace or delete any files using a specially created application...
Threatlist: Hackers Turn to Python as Attack Coding Language of Choice
Python was recently touted as on track to become the world’s most prevalent coding language, looking to swallow, as it were, the majority of the market share for developers. According to recent analysis, Python’s popularity also extends to black hats. Mirroring the findings around its use by code...
ZOHO ManageEngine Applications Manager Serialization Vulnerability
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A serialization...
Oracle Linux 7 : flatpak (ELSA-2018-2766)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2766 advisory. 0.8.8-4 - Add patch for CVE-2018-6560 1547376 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
ManageEngine Desktop Central 10.0.271 - Cross-Site Scripting Vulnerability
Exploit for java platform in category web applications...
CVE-2018-16364
A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share...
Remote code execution
A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share...
CVE-2018-16364
Zoho ManageEngine Applications Manager is affected by a serialization vulnerability that enables remote code execution on Windows when handling a payload on an SMB share. The flaw exists in builds prior to 13740. The vulnerability is exploitable over the network and does not require user interact...
Moderate: Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...