148 matches found
Vulnerability in client (CVE-2020-25694)
Reconnection can downgrade connection security settings Many PostgreSQL-provided client applications have options that create additional database connections. Some of those applications reuse only the basic connection parameters e.g. host, user, port, dropping others. If this drops a...
CVE-2020-3556: Improper Input Validation
A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious script. The vulnerability is due to a lack of authentication to the IPC listene...
Apache Olingo CVE-2020-1925 Server Side Request Forgery Access Bypass Vulnerability
Description Apache Olingo is prone to an access-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Apache Olingo versions prior to 4.7.1 are vulnerable. Technologies Affected Apache Oling...
DLL Hijacking Vulnerability in LePlay Screen Casting pc Client Software
LePlay Screen Casting for PC, LePlay Screen Casting for PC is a smart computer screen casting software. LePlay screen casting pc client software exists DLL hijacking vulnerability, attackers can use the vulnerability in the client process to inject executable DLL file, to perform arbitrary...
DLL Hijacking Vulnerability in IS Voice pc Client Software
IS Voice for PC is a voice online group chat tool designed and developed for Chinese gamers. IS Voice for PC can provide stable and high-quality voice service, and it is a full-featured multiplayer voice software. IS Voice pc client software has a DLL hijacking vulnerability, which can be exploit...
Multiple F5 Products CVE-2019-6665 Man in the Middle Security Bypass Vulnerability
Description Multiple F5 Products are prone to a security-bypass vulnerability. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks. The following products are vulnerable: BIG-IP ASM 15.0.0 throu...
Drupal Booking and Availability Management Tools Module Access Bypass Vulnerability
Description The Booking and Availability Management Tools BAT module for Drupal is prone to an access-bypass vulnerability. Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks. Booking and Availability...
Microsoft Windows LNK CVE-2019-1280 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks may cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
Microsoft Windows Hyper-V CVE-2019-0710 Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-bas...
CVE-2017-17023
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...
Microsoft Windows SMB Server CVE-2019-0821 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows SMB Server CVE-2019-0703 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
CVE-2019-8263
UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service DoS condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This...
F5 BIG-IP APM and BIG-IP APM Clients svpn elevation of privilege vulnerability
F5 BIG-IP APM and BIG-IP APM Clients are both products of F5 Corporation in the U.S. F5 BIG-IP APM is a suite of access and security solutions. the APM Client is a suite of APM client software. svpn is one of the private VPN components. An elevation of privilege vulnerability exists in F5 BIG-IP...
Query on how TransparentKeyPassthrough affects window resize.
To know how transparent key passthough works in the backend and how it affects the behavior of the client window...
Microsoft OData CVE-2018-8269 Denial of Service Vulnerability
Description Microsoft OData is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft OData Recommendations Run all software as a nonprivileged user with minimal access rights. To reduce the...
EPoD: Ethereum Packet of Death (CVE-2018-12018)
PeckShield has so far discovered quite a few critical smart contract vulnerabilities. Besides smart contracts, the Ethereum ecosystem also includes other various components that are equally exposed to possible exploitation. Obviously, one such component is the core of Ethereum, i.e., the underlyi...
WFICA32.exe Shows 100% CPU usage in Task Manager
WFICA32.exe on client shows 100% CPU usage in Task Manager...
Microsoft Windows WebDAV CVE-2018-8175 Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Version 1803 for x64-based Systems Microsoft...