Command Execution Vulnerability in Free Fiction Software

The free novel software is a full range of free listening and reading tools developed by KDDI, focusing on online novel apps. Free Novel Software suffers from a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

Citrix Virtual Apps and Desktops Privilege Escalation Vulnerability (CTX319750)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is 2016 and earlier, or s 1912 LTSR CU3 or earlier. It is, therefore, affected by a privilege escalation vulnerability. An unspecified flaw exists related to Citrix Profile Management or Citrix Profile Management...

Vulnerabilities fixed in Oracle Siebel Suite

Oracle has fixed vulnerabilities in Siebel CRM and Siebel Apps. The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data Acce...

PT-2021-4009

Name of the Vulnerable Software and Affected Versions Java SE versions 7u301, 8u291, 11.0.11, 16.0.1 Oracle GraalVM Enterprise Edition versions 20.3.2 and 21.1.0 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle Graal...

CVE-2021-0590

In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...

Updated Joker Malware Floods into Android Apps

The Joker mobile trojan is back on Google Play, with an uptick in malicious Android applications that hide the billing-fraud malware, researchers said. It’s also using new approaches to skirt past Google’s app-vetting process. Joker has been around since 2017, disguising itself within common,...

July 13, 2021—KB5004307 (Security-only update)

None None...

July 13, 2021—KB5004299 (Security-only update)

None None...

Description of the security update for Office Web Apps Server 2013: July 13, 2021 (KB5001986)

None None...

Code injection

The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party apps to send specific broadcasts, causing the Bluetooth module to crash. This vulnerability is successfully exploited to cause the Bluetooth function to become abnormal. Affected product...

PT-2021-5600 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Word versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to insufficient inp...

Citrix Releases Security Updates for Virtual Apps and Desktops

Citrix has released security updates to address a vulnerability in multiple versions of Virtual Apps and Desktops. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Citrix Security Update CTX319750 and apply the...

Security Updates for Microsoft Office Web Apps (July 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities in Microsoft Excel. CVE-2021-34501, CVE-2021-34518 - A spoofing vulnerability in Microsoft Offic...

Citrix Systems Citrix Virtual Apps and Desktops 安全漏洞

Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems USA that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops. The vulnerability allows users of a Windows VDA with the...

July 13, 2021 Public preview security update (KB5004243)

None None...

Citrix Virtual Apps and Desktops Security Update

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM. This...

CVE-2021-25428

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

CVE-2021-25430

Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...

CVE-2021-25428

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

Input validation

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...