The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. This allows attackers to enhance their privileges.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to enhance their...

Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws

Attackers are actively exploiting two recently-patched vulnerabilities in a popular suite of tools for WordPress websites from marketing platform Thrive Themes. Thrive Themes offers various products to help WordPress websites “convert visitors into leads and customers.” Its suite of products,...

Cisco IOS XE SD-WAN Software 注入漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary command execution vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker...

MangaDex Site Offline Following Hacking Incident

MangaDex, the online repository of manga animation comics, will be closed until further notice following a hacking incident. Last week, the site reported that a cyberattacker had gained access to an administrative account, “through the reuse of a session token found in an old database leak throug...

CISA Warns of Security Flaws in GE Power Management Devices

The U.S. Cybersecurity & Infrastructure Security Agency CISA is warning of critical-severity security flaws in GE’s Universal Relay UR family of power management devices. GE’s UR devices are the “basis of simplified power management for the protection of critical assets,” according to the company...

Adobe Fixes Critical ColdFusion Flaw in Emergency Update

In an unscheduled security update, Adobe is warning of a critical security flaw in its ColdFusion platform, used for building web applications. The security alert comes two weeks after Adobe’s regularly-scheduled updates. During these updates, the tech company issued patches for a slew of critica...

Xiamen Nancy Networks Technology Co., Ltd. website management backend has logic flaws vulnerability

Xiamen Nancy Networks Technology Co., Ltd. is a comprehensive digital high-tech enterprises to provide website construction, system development content analysis and planning, interface front-end visual design, back-end program database development, website integrated marketing plan, website...

The vulnerability of Google Chrome browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browsers is related to the improper application of policies. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

Medium: qemu-kvm

Issue Overview: An out-of-bound write access flaw was found in the way QEMU loads ROM contents at boot time. This flaw occurs in the romcopy routine while loading the contents of a 32-bit -kernel image into memory. Running an untrusted -kernel image may load contents at arbitrary memory locations...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

USN-4859-1 libmediainfo vulnerabilities

It was discovered that MediaInfoLib contained multiple security issues when handling certain multimedia files. If a user were tricked into opening a crafted multimedia file, an attacker could cause MediaInfoLib to crash, resulting in a denial of service...

USN-4813-1 jackson-databind vulnerabilities

It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to obtain sensitive information. CVE-2018-11307, CVE-2019-12086, CVE-2019-12814 It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could...

USN-4800-1 lynx vulnerabilities

It was discovered that Lynx incorrectly handled certain URLs. A remote attacker could possibly use this issue to obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM. CVE-2016-9179 It was discovered that Lynx incorrectly handled certain HTML files. A...

The vulnerability of the LDAP library in the Samba networking software package allows attackers to compromise data integrity due to security flaws.

The vulnerability of the LDAP library in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software suite is related to security flaws. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software package is related to security flaws. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Vulnerabilities of operating systems such as iPadOS, iPhoneOS, tvOS, watchOS, and iCloud service, as well as the Safari browser and iTunes multimedia player, involve authentication errors that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities of operating systems such as iPadOS, iPhoneOS, tvOS, watchOS, the iCloud service, the Safari browser, and the multimedia player iTunes are related to authentication errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and...

The vulnerability of the SMB1 protocol implementation in Samba network communication software is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Hackers Are Targeting Microsoft Exchange Servers With Ransomware

It didn't take long. Intelligence agencies and cybersecurity researchers had been warning that unpatched Exchange Servers could open the pathway for ransomware infections in the wake of swift escalation of the attacks since last week. Now it appears that threat actors have caught up. According to...

The vulnerability of the “Gradebook” module implementation in the virtual learning environment Moodle allows a violator to gain unauthorized access to protected information.

The vulnerability of the “Gradebook” module in the virtual learning environment Moodle is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...