PT-2018-1311 · Microsoft +3 · Ie +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows VBScript Engine versions prior to the fixed version Description: A remote code execution issue exists in the way the VBScript engine handles objects in memory. This allows remote attackers to execute arbitrary code and affec...

java-1.7.0-openjdk security update

1:1.7.0.181-2.6.14.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.181-2.6.14.1 - Fix invalid license 'LGPL+' should be LGPLv2+ for ECC code and add missing ones - Resolves: rhbz1559766 1:1.7.0.181-2.6.14.0 - Bump to 2.6.14 and u181b00. - Drop 8197981 Zero 32-bit patch now applied upstream. - Updat...

SUSE-SU-2018:1103-1 Security update for crowbar-openstack

This update for crowbar-openstack provides the following fixes: - memcached: Disable UDP by default to prevent spoofed traffic amplification DoS bsc1083903, CVE-2018-1000115 - nova: Add resource limits for api and compute bsc1057086...

JVN#95589314: Joruri Gw vulnerable to arbitrary file upload

Joruri Gw provided by SiteBridge Inc. is groupware which runs on Ruby on Rails. Joruri Gw contains a vulnerability that may allow an attacker to upload arbitrary files CWE-434. Impact A user may upload arbitrary files. When PHP code execution is enabled on the server, a user may execute arbitrary...

Microsoft Windows: Turn off Windows Location Provider

This policy setting turns off the Windows Location Provider feature. If enabled, the Windows Location Provider feature is turned off, and programs are not able to use the Windows Location Provider feature. OpenVAS Vulnerability Test $Id: winlocationprovider.nasl 11363 2018-09-12 13:46:05Z emoss $...

PT-2018-5655 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 8.3.2.25013 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, allowing arbitrary code execution. This can be triggered by an...

Cross site scripting in the system log

Date : 2018-04-18 CVE ID : CVE-2018-10125 Description With a manipulated request, an attacker can implant a script which is executed when a logged in back end user opens the system log. The attacker does not have to be logged in. Affected versions Contao 3. up to 3.5.33 Contao 4.0 Contao 4.1 Cont...

Microsoft Office: Disable Roaming Office User Settings

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013roamingofficeusersettings.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Roaming Office User Settings Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable Internet Fax feature

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013internetfaxfeature.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Internet Fax feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Microsoft Office: Disable the Office client from polling the SharePoint Server for published links

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013clientpollingfromofficeserver.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable the Office client from polling the SharePoint Server for published links Authors: Emanuel Moss Copyright: Copyright c 201...

PT-2018-16240 · Nasa · Cfitsio

Name of the Vulnerable Software and Affected Versions: NASA CFITSIO version 3.42 Description: The issue arises from specially crafted images parsed via the library, which can cause a stack-based buffer overflow, overwriting arbitrary data. This can be triggered by delivering an FIT image,...

Microsoft Office: Disable all Trust Bar notifications for security issues

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013trustbarnotifications.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable all Trust Bar notifications for security issues Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable password to open UI

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013passwordtoopenui.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable password to open UI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

PT-2018-16242 · Nasa +1 · Cfitsio +1

Name of the Vulnerable Software and Affected Versions: NASA CFITSIO version 3.42 Description: The issue is related to a stack-based buffer overflow in the ffghbn function when parsing specially crafted images via the library. This can lead to overwriting arbitrary data, potentially allowing an...

XSS in the agile wallboard gadget through quick filter names - CVE-2017-18100

The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of quick filters. h3. Workaround Disable the gadget. - Navigate to Administration Add-ons Manage add-ons and se...

PT-2018-3874 · Pulnix +7 · Pulnix +10

Name of the Vulnerable Software and Affected Versions: TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login Description: The issue allows remote attackers to bypass authentication via a "Cookie: uid=admin"...

PT-2018-19070

Name of the Vulnerable Software and Affected Versions Roundcube versions 1.2.0 through 1.3.5 Description The issue allows for an IMAP injection attack by exploiting the unsanitized " uid" parameter in an archive.php request, specifically when the task=mail& mbox=INBOX& action=plugin.move2archive...

PMS 0.42 Stack-Based Buffer Overflow

Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer local module Tested on: Kali i686 GNU/Linux Description: PMS 0.42 is prone to a local unauthenticated stack-based overflow The vulnerability is due to an unproper filter of user supplied input...

PMS 0.42 Stack-Based Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer local module Tested on: Kali i686 GNU/Linux Description: PMS 0.42 is prone to a local unauthenticated stack-based overflow The vulnerability is...

CVE-2018-4172

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature via vectors involving a backup restore...