PT-2018-10598 · Windscribe +1 · Windscribe +1

Name of the Vulnerable Software and Affected Versions: Windscribe version 1.81 Description: The issue concerns the VPN component in Windscribe, which uses the OpenVPN client and creates a system process named WindScribeService.exe. This process establishes a named pipe endpoint,...

Microsoft Windows Defender AV: Turn off Windows Defender Antivirus

This policy setting turns off Windows Defender Antivirus. If you enable this policy setting, Windows Defender Antivirus does not run, and computers are not scanned for malware or other potentially unwanted software. If you disable or do not configure this policy setting, by default Windows Defend...

CVE-2018-3639 - Citrix XenServer Security Update

Description of Problem CVE-2018-3639 Speculative Store Bypass Disable is an issue that may affect third-party software that runs in guest VMs on Citrix XenServer. This is not an issue caused by Citrix XenServer and Citrix is unaware of any means of exploiting this issue against XenServer itself...

SA160: Return of the Bleichenbacher Oracle Threat (ROBOT)

SUMMARY Symantec Network Protection products using affected SSL/TLS server implementations and RSA key exchange are susceptible to a variation of the Bleichenbacher adaptive chosen ciphertext attack. A remote attacker, who has captured a pre-recorded encrypted SSL session to the target, can...

PT-2018-16105 · Intel · Intel Online Connect Access

Name of the Vulnerable Software and Affected Versions: Intel Online Connect Access version 1.9.22.0 Description: The issue is related to parameter corruption in the NDIS filter driver, which can be exploited by an attacker to cause a denial of service. This can be achieved via local access...

Microsoft Windows 2003 SP2 - RRAS SMB Remote Code Execution

Microsoft Windows 2003 SP2 - RRAS SMB Remote Code Execution !/usr/bin/env python -- coding: utf-8 -- Tested in Windows Server 2003 SP2 ES - Only works when RRAS service is enabled. The exploited vulnerability is an arbitraty pointer deference affecting the dwVarID field of the MIBOPAQUEQUERY...

PT-2018-10050 · Red Hat · Wildfly

Name of the Vulnerable Software and Affected Versions: WildFly version 10.1.2.Final Description: An issue allows an attacker to access the administration panel without authentication using anonymous access. Once logged in, a misconfiguration permits an anonymous user to deploy a malicious .war...

PT-2018-1311 · Microsoft +3 · Ie +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows VBScript Engine versions prior to the fixed version Description: A remote code execution issue exists in the way the VBScript engine handles objects in memory. This allows remote attackers to execute arbitrary code and affec...

java-1.7.0-openjdk security update

1:1.7.0.181-2.6.14.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.181-2.6.14.1 - Fix invalid license 'LGPL+' should be LGPLv2+ for ECC code and add missing ones - Resolves: rhbz1559766 1:1.7.0.181-2.6.14.0 - Bump to 2.6.14 and u181b00. - Drop 8197981 Zero 32-bit patch now applied upstream. - Updat...

SUSE-SU-2018:1103-1 Security update for crowbar-openstack

This update for crowbar-openstack provides the following fixes: - memcached: Disable UDP by default to prevent spoofed traffic amplification DoS bsc1083903, CVE-2018-1000115 - nova: Add resource limits for api and compute bsc1057086...

JVN#95589314: Joruri Gw vulnerable to arbitrary file upload

Joruri Gw provided by SiteBridge Inc. is groupware which runs on Ruby on Rails. Joruri Gw contains a vulnerability that may allow an attacker to upload arbitrary files CWE-434. Impact A user may upload arbitrary files. When PHP code execution is enabled on the server, a user may execute arbitrary...

Microsoft Windows: Turn off Windows Location Provider

This policy setting turns off the Windows Location Provider feature. If enabled, the Windows Location Provider feature is turned off, and programs are not able to use the Windows Location Provider feature. OpenVAS Vulnerability Test $Id: winlocationprovider.nasl 11363 2018-09-12 13:46:05Z emoss $...

PT-2018-5655 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 8.3.2.25013 Description: A use-after-free issue in the JavaScript engine of Foxit PDF Reader can be exploited by opening a specially crafted PDF document, allowing arbitrary code execution. This can be triggered by an...

Cross site scripting in the system log

Date : 2018-04-18 CVE ID : CVE-2018-10125 Description With a manipulated request, an attacker can implant a script which is executed when a logged in back end user opens the system log. The attacker does not have to be logged in. Affected versions Contao 3. up to 3.5.33 Contao 4.0 Contao 4.1 Cont...

Microsoft Office: Disable Roaming Office User Settings

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013roamingofficeusersettings.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Roaming Office User Settings Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable Internet Fax feature

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013internetfaxfeature.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Internet Fax feature Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Microsoft Office: Disable the Office client from polling the SharePoint Server for published links

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013clientpollingfromofficeserver.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable the Office client from polling the SharePoint Server for published links Authors: Emanuel Moss Copyright: Copyright c 201...

PT-2018-16240 · Nasa · Cfitsio

Name of the Vulnerable Software and Affected Versions: NASA CFITSIO version 3.42 Description: The issue arises from specially crafted images parsed via the library, which can cause a stack-based buffer overflow, overwriting arbitrary data. This can be triggered by delivering an FIT image,...

Microsoft Office: Disable all Trust Bar notifications for security issues

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013trustbarnotifications.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable all Trust Bar notifications for security issues Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Office: Disable password to open UI

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013passwordtoopenui.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable password to open UI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...