15100 matches found
CVE-2020-3760
CVE-2020-3760 affects Adobe Digital Editions versions 4.5.10 and below, where a command-injection flaw could lead to arbitrary code execution. Root cause: improper handling of input data enabling shell execution. Impact per sources: high-severity, with potential for full compromise of the affecte...
CVE-2020-3760
Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...
A US Data Protection Agency
The United States is one of the few democracies without some formal data protection agency, and we need one. Senator Gillibrand just proposed creating one...
CVE-2020-3759: Undefined Security Weakness
Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...
CVE-2020-3760: Improper Neutralization of Special Elements used in a Command
Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...
Adobe Digital Editions < 4.5.11 Multiple Vulnerabilities (APSB20-07)
The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.11. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-07 advisory. - Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful...
Adobe Digital Editions Multiple Vulnerabilities (APSB20-07) - Windows
Adobe Digital Edition is prone to code multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CSI Evidence Indicators for Targeted Ransomware Attacks
ARCHIVED STORY CSI: Evidence Indicators for Targeted Ransomware Attacks – Part I By Trellix · Febraury 12, 2020 For many years now I have been working and teaching in the field of digital forensics, malware analysis and threat intelligence. During one of the classes we always talk about Lockard’s...
CSI Evidence Indicators for Targeted Ransomware Attacks
ARCHIVED STORY CSI: Evidence Indicators for Targeted Ransomware Attacks – Part I By Trellix · Febraury 12, 2020 For many years now I have been working and teaching in the field of digital forensics, malware analysis and threat intelligence. During one of the classes we always talk about Lockard’s...
Adobe Digital Editions Buffer Overflow Vulnerability (CNVD-2020-04712)
Adobe Digital Editions is software for reading and managing eBooks and other digital publications. A buffer overflow vulnerability exists in Adobe Digital Editions. An attacker could exploit the vulnerability to disclose sensitive information...
Adobe Digital Editions Command Injection Vulnerability
Adobe Digital Editions is software for reading and managing eBooks and other digital publications. A security vulnerability exists in Adobe Digital Editions. An attacker could exploit the vulnerability to execute arbitrary code...
Token stored in plain text by digitalocean-plugin
digitalocean-plugin 1.1 and earlier stores a token unencrypted in the global config.xml files as part of its configuration. This credential can be viewed by users with access to the Jenkins controller file system. As of publication of this advisory, there is no fix...
Microsoft Patch Tuesday, February 2020 Edition
Microsoft today released updates to plug nearly 100 security holes in various versions of its Windows operating system and related software, including a zero-day vulnerability in Internet Explorer IE that is actively being exploited. Also, Adobe has issued a bevy of security updates for its vario...
Adobe Releases Patches for Dozens of Critical Flaws in 5 Software
Here comes the second 'Patch Tuesday' of this year. Adobe today released the latest security updates for five of its widely used software that patch a total of 42 newly discovered vulnerabilities, 35 of which are critical in severity. The first four of the total five affected software, all listed...
Adobe Releases Security Updates for Multiple Products
Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...
PT-2020-2370
Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.10 and below Description The issue is related to a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. The vulnerability exists due to the lack of measures to...
PT-2020-6355
Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.10 and below Description The issue is related to a buffer error in the program, which could allow a remote attacker to disclose protected information upon successful exploitation. Recommendations For Adobe...
APSB20-07 Security update available for Adobe Digital Editions
Adobe has released a security update for Adobe Digital Editions. This update resolves a critical and an important vulnerability. Successful exploitation could lead to Arbitrary Code Execution and Information Disclosure respectively in the context of the current user...
BYO-Bug Tactic Attacks Windows Kernel with Outdated Driver
The operators behind the RobbinHood ransomware are using a vulnerable, legacy driver from Taiwan-based motherboard manufacturer Gigabyte in order to get around antivirus protections. The “bring-your-own-bug” tactic is likely to crop up in other attacks going forward, according to security analyst...
