2477 matches found
Apple's FaceID
This is a good interview with Apple's SVP of Software Engineering about FaceID. Honestly, I don't know what to think. I am confident that Apple is not collecting a photo database, but not optimistic that it can't be hacked with fake faces. I dislike the fact that the police can point the phone at...
Microsoft Outlook 2007 Service Pack 3 Defense in Depth Vulnerability (KB4011086)
This host is missing an important security update according to Microsoft KB4011086 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2010 Service Pack 2 Defense in Depth Vulnerability (KB4011089)
This host is missing an important security update according to Microsoft KB4011089 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2013 Defense in Depth Update (KB4011090)
This host is missing an important security update according to Microsoft KB4011090 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2013 Defense in Depth Update (KB4011103)
This host is missing an important security update according to Microsoft KB4011103 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2016 Defense in Depth Update (KB4011038)
This host is missing an important security update according to Microsoft KB4011038 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2007 Service Pack 3 Defense in Depth Vulnerability (KB4011063)
This host is missing an important security update according to Microsoft KB4011063 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2016 Defense in Depth Update (KB4011091)
This host is missing an important security update according to Microsoft KB4011091 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Description of the security update for Outlook 2013: September 12, 2017
Description of the security update for Outlook 2013: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, y...
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure...
Description of the security update for Outlook 2016: September 12, 2017
None None...
Description of the security update for Outlook 2007: September 19, 2017
Description of the security update for Outlook 2007: September 19, 2017 Summary This update provides defense-in-depth changes to help improve security in Microsoft Outlook 2007. To learn more about these vulnerabilities, see Advisory ADV170015. Note To apply this security update, you must have th...
Description of the security update for Office 2010: September 12, 2017
Description of the security update for Office 2010: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, yo...
Description of the security update for Office 2013: September 12, 2017
Description of the security update for Office 2013: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, yo...
Description of the security update for Office 2016: September 12, 2017
None None...
Lynis 2.5.5 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
CVE-2017-14173
In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...
Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks
Administrators who have Siemens’ LOGO! logic module deployed in automation setups are being urged to update its firmware. The German industrial manufacturing giant pushed out an update for its LOGO! 8 BM devices Wednesday morning to fix a vulnerability CVE-2017-12734 that could let an attacker...
Siemens LOGO! (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO! Vulnerabilities: Insufficiently Protected Credentials, Man-in-the-Middle 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...
The vulnerability of the GetImageDepth function in MagickCore/attribute.c, a console-based graphic editor for ImageMagick, allows a hacker to cause a service failure.
The vulnerability of the GetImageDepth function in MagickCore/attribute.c of the ImageMagick console graphic editor is related to the writing of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure rereading of the buffer in dynami...