Windows Digital TV Tuner Elevation of Privilege Vulnerability

...

Windows Digital Media Receiver Elevation of Privilege Vulnerability

...

PT-2021-6157

Name of the Vulnerable Software and Affected Versions Windows Digital TV Tuner affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows Digital TV Tuner application, which is caused by insecure privilege management. This...

PT-2021-6348

Name of the Vulnerable Software and Affected Versions Windows Digital Media Receiver affected versions not specified Description The issue is related to insecure privilege management in the Windows Digital Media Receiver component of the Windows operating system. Exploitation of this issue may...

Microsoft Windows Digital TV Tuner 权限许可和访问控制问题漏洞

Microsoft Windows Digital TV Tuner is a television signal and compatible television tuner device from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Digital TV Tuner with privilege license and access control issues. The following products and versions are affected: Windows...

KLA12387 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

digitalmarketingaid.com Improper Access Control vulnerability OBB-2298485

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

digital-targets.com Improper Access Control vulnerability OBB-2298478

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Wedia, Digital Asset Management Software Provider, Delivers Seamless Digital Experiences with Help from Akamai

Wedia makes it possible for some of the world’s biggest companies to effectively manage, customize, and deliver their marketing assets. Akamai is delighted that this fantastic brand has chosen us to deliver a rich and engaging web experience for its customers while also ensuring the highest level...

What is a Supply Chain Attack ❓

Presentation The Kaseya cyberattack disturbed more than 1,000 organizations over the Fourth of July weekend and may end up being perhaps the greatest hack ever. It’s additionally a typical case of an “Supply Chain” hack: a sort of cyberattack where hoodlums target programming merchants or IT...

USN-5168-4 nss regression

USN-5168-3 fixed a vulnerability in NSS. Unfortunately that update introduced a regression that could break SSL connections. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS...

nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

A remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an attacker posing as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection. Similarly, a server application compiled with NSS,...

The vulnerability of the Adobe Digital Editions e-book reading program, related to the lack of protective measures for website structures, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Digital Editions e-book reading program relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a hacker to execute arbitrary code through a specially created link...

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, allowing a hacker to perform arbitrary writes to the file system.

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow a malicious actor to perform arbitrary writes to the file system using a specially crafted file...

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK lies in its ability to read beyond the buffer boundaries, allowing attackers to access confidential information.

The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential information...

NICKEL targeting government organizations across Latin America and Europe

The Microsoft Threat Intelligence Center MSTIC has observed NICKEL, a China-based threat actor, targeting governments, diplomatic entities, and non-governmental organizations NGOs across Central and South America, the Caribbean, Europe, and North America. MSTIC has been tracking NICKEL since 2016...

[SECURITY] Fedora 34 Update: digikam-7.3.0-4.fc34

digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...

Crafter CMS Cross-Site Scripting Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications.A cross-site scripting vulnerability exists in Crafter CMS, which stems from a lack of data validation filtering of user-supplied data and output. An attacker with a Site role could exploit the...

What Are Your Top Cloud Security Challenges? Threatpost Poll

There are myriad reasons that organizations are moving en masse to the cloud: Digital transformation, the ability to be more agile, cost reduction, better collaboration and productivity, and, in these pandemic times, a better ability to support remote working. Cybercriminals are moving to the clo...

How to Cultivate a Security-first Approach to Your Business

Businesses of all types and sizes are struggling with complexity. They?re addressing hybrid workforces that need to be secured, digital transformation programs, geographic regulations and data laws, industry regulations, and the list goes on. In the midst of this complexity, organizations have to...