8928 matches found
January 3, 2018—KB4056897 (Security-only update)
None None...
Android Security Bulletin—January 2018Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Dojo by BullGuard - Customized SSL, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Dojo by BullGuard published at the 'play' market has multiple vulnerabilities...
Sound Waves can Help Hackers Disrupt Functions of Hard Disk Drives
By Waqas Hard Disk Drives HDDs are most commonly used storage components This is a post from HackRead.com Read the original post: Sound Waves can Help Hackers Disrupt Functions of Hard Disk Drives...
Asus_GlobalWirteOverflow
Vulnerability: Global buffer overflow in networkmap ------------------------------------------ Exploitation: Can write data at any address in heap ------------------------------------------ Vendor of Product: Asus wireless router ------------------------------------------ Affected Products and...
Layering multiple Office Components (Word, Visio, Project, Outlook, etc.)
There are a couple of places this can go bad. One is, never run any Office component in the Install Machine. The first time Office runs, it writes some machine-specific information into the registry, and if that layer then wakes up on another machine, it has to go through the configuration again...
CVE-2017-1746
IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...
CVE-2017-1746
IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...
Cross site request forgery (csrf)
IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...
CVE-2017-1746
CVE-2017-1746 affects IBM Jazz for Service Management (JazzSM) version 1.1.3, vulnerable to Cross-Site Request Forgery (CSRF) that could enable malicious actions transmitted from a trusted user. Remediation is available: JazzSM 1.1.3 with Cumulative Patch Level 5 (1.1.3.0-TIV-JazzSM-DASH-Cumulati...
CVE-2017-1746
IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...
CVE-2017-1631
IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133140...
UBUNTU-CVE-2017-17513
TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linkedscripts/context/stubs/unix/mtxrun,...
المسافر لحجز الفنادق و الطيران - Exported components, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application المسافر لحجز الفنادق و الطيران published at the 'play' market has multiple vulnerabilities...
International Components for Unicode (ICU) for C/C++ Stack Buffer Overflow Vulnerability
International Components for Unicode ICU is the U.S. IBM and other companies to develop a C / C + + and Java programming languages provide a complete set of Unicode data manipulation function library, but also an open-source project to support the internationalization of software. A denial of...
CVE-2017-15422
Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
UBUNTU-CVE-2017-15422
Integer overflow in international date handling in International Components for Unicode ICU for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
TIBCO Security Advisory: December 12, 2017 - tibbr -2017-5530
SAML protocol handling errors in tibbr Original release date: December 12, 2017 Last revised:-- CVE-2017-5530 Source: TIBCO SoftwareInc. SAML protocol handling errors in tibbr Original release date: December 12, 2017 Last revised: -- Source: TIBCO Software Inc. Systems Affected tibbr Community...
