Microsoft Windows Multiple Vulnerabilities (KB4048953)

This host is missing a critical security update according to Microsoft KB4048953 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat

Adobe kicked off today’s Patch Tuesday barrage with a monster update for Acrobat and Reader patching dozens of remote code execution vulnerabilities, along with the near-customary Flash Player update addressing a handful of critical flaws. None of the vulnerabilities patched today are under activ...

The vulnerability of the Microsoft Windows Text Services Framework software interface in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows Text Services Framework TSF operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

The vulnerability of Xen hypervisors relates to deficiencies in access control, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally within a user account of the x86 guest operating system in hardware virtualization mode, to trigger a hypervisor failure or increase their...

The vulnerability of the ChakraCore JavaScript script handler lies in the lack of protection for service data, allowing attackers to execute arbitrary code.

The vulnerability of the JavaScript ChakraCore virtual machine’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

pcc - PHP Secure Configuration Checker

Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful tasks. Idea one single file for ea...

IEEE P1735 Encryption Is Broken—Flaws Allow Intellectual Property Theft

Researchers have uncovered several major weaknesses in the implementation of the Institute of Electrical and Electronics Engineers IEEE P1735 cryptography standard that can be exploited to unlock, modify or steal encrypted system-on-chip blueprints. The IEEE P1735 scheme was designed to encrypt...

Shinex Mobile App Has Logic Design Flaws

Credit Ease Mobile App is a software that helps credit managers to work efficiently. There is a logical design vulnerability in Xinyik Mobile APP. An attacker can log into any account system by capturing packets and bursting the verification code...

The vulnerability of the micro-programming software of the access control system for the virtual environment NetScaler Gateway, as well as the micro-programming software of the application delivery controller Citrix NetScaler Application Delivery Controller, allows a intruder to gain access to the NetScaler management interface.

The vulnerability of the microprogramming software of the access control system for the virtual environment NetScaler Gateway and the microprogramming software of the application delivery controller Citrix NetScaler Application Delivery Controller is related to deficiencies in access control...

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to disclose confidential information

The vulnerability of the Media Framework component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose confidential information remotely...

The vulnerability of the Camera component in the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Camera component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

BlueBorne vulnerabilities and security flaws in Bluetooth stacks

A collection of Bluetooth implementation vulnerabilities known as "BlueBorne" has been released. These vulnerabilities collectively affect Windows, iOS, and Linux-kernel-based operating systems including Android and Tizen, and may in the worst case allow an unauthenticated attacker to perform...

The vulnerability of the Audio Hardware Abstraction Layer interface of the Media Framework component in the Android operating system allows a hacker to increase their privileges.

The vulnerability of the Audio Hardware Abstraction Layer HAL component of the Android operating system’s Media Framework is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Framework component (GateKeeperResponse) in the Android operating system, which allows a violator to increase their privileges

The vulnerability of the Framework GateKeeperResponse component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34419)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

USN-3468-3 linux-gcp vulnerabilities

It was discovered that the KVM subsystem in the Linux kernel did not properly bound guest IRQs. A local attacker in a guest VM could use this to cause a denial of service host system crash. CVE-2017-1000252 It was discovered that the Flash-Friendly File System f2fs implementation in the Linux...

tomcat6 security update

0:6.0.24-111 - Resolves: rhbz1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws 0:6.0.24-110 - Resolves: rhbz1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism 0:6.0.24-109 - Resolves: rhbz1461851 The tomcat6 build is incompatible with the ECJ...

Multiple Logic Design Vulnerabilities in S-CMS v3.0

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS v3.0 there are multiple logical design vulnerabilities, an attacker can use the vulnerability over the right to view, pay and delete any order, as well as any article traversal and editing operatio...

IrfanView Multiple Vulnerabilities (Oct 2017)

IrfanView is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:irfanview:irfanview"; ifdescripti...