7023 matches found
西部数据 Western Digital G-Technology ArmorLock NVMe SSD 安全漏洞
The Western Digital G-Technology ArmorLock NVMe SSD is a firmware from Western Digital, Inc. It provides a computer storage device made with integrated circuits. A security vulnerability exists in Western Digital G-Technology ArmorLock NVMe SSDs, which stems from an insecure storage key. The...
CVE-2020-35454
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration...
Vulnerability of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel – related to improper code generation – allows attackers to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft Excel spreadsheet editors, related to improper code generation management, allows attackers to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft Excel spreadsheet editors are related to improper code generation. Exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code...
The vulnerability of the Click-to-Run component of the Microsoft 365 Apps for Enterprise suite, related to improper code generation management, allows a malicious actor to execute arbitrary code.
The vulnerability of the Click-to-Run component of the Microsoft 365 Apps for Enterprise suite is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Vulnerability of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel – related to improper code generation – allows attackers to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Visio’s graphical editor, as well as Microsoft Office applications and 365 Apps for Enterprise, is related to security configuration errors, allowing attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation creation software, related to improper code generation, allowing attackers to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software are related to improper code generation. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code remotely...
CVE-2021-28375
An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...
CVE-2020-5016
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to vi...
Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (March 2021)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
PT-2021-13048 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is caused by a logic error in the code of CrossProfileAppsServiceImpl.java, which can lead to an application's INTERACT ACROSS PROFILES grant state not displaying properly in the setting UI...
Android users hit by banking trojan in 10 Play Store apps
By Deeba Ahmed Another day, another Android banking trojan caught targeting unsuspecting users but this time it does it from Play Store without any prevention. This is a post from HackRead.com Read the original post: Android users hit by banking trojan in 10 Play Store apps...
Security Update for Microsoft Office Web Apps Server 2013 (KB4493234) farm-deployment
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office Web Apps Server 2013 (KB4493234)
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware
Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial accounts of victims as well as full control of their devices. "This...
9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware
Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial accounts of victims as well as full control of their devices. "This...
Description of the security update for Office Web Apps Server 2013: March 9, 2021 (KB4493234)
None None...
Microsoft Office ClickToRun 安全漏洞
Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in Microsoft Office ClickToRun. The following products and versions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,...
Microsoft Office PowerPoint 安全漏洞
Microsoft Office PowerPoint is a software used to create, presentations PPT by Microsoft Corporation USA. A security vulnerability exists in Microsoft Office PowerPoint. The following products and editions are affected:Microsoft PowerPoint 2013 Service Pack 1 64-bit editions,Microsoft PowerPoint...