9313 matches found
The vulnerability of the programmatically defined Cisco SD-WAN network, which arises due to insufficient validation of input data, allows a hacker to increase their privileges.
The vulnerability of the programmatically defined Cisco SD-WAN network exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Moxa NPort 5150A asynchronous server allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Moxa NPort 5150A asynchronous server lies in its security flaws. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Update module and the ES Service of the Dr.Web Enterprise Security Suite allows a perpetrator to execute arbitrary code.
The vulnerability of the Update module and the ES Service of the Dr.Web Enterprise Security Suite antivirus software is related to deficiencies in access control. Exploiting this vulnerability allows a hacker to execute arbitrary code within the context of the antivirus process, with system...
Design/Logic Flaw
"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime;...
The vulnerability of the Eclipse Mosquitto messaging broker, related to authentication process flaws, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Eclipse Mosquitto messaging broker is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Eclipse Mosquitto messaging broker, related to authentication process flaws, allows attackers to gain unauthorized access to protected information.
The vulnerability of the access control list configuration of the Eclipse Mosquitto broker lies in insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
Adobe Discloses Critical Code-Execution Bugs in July Update
Adobe has released its scheduled July 2020 security updates, covering flaws in five different product areas: Creative Cloud Desktop; Media Encoder; Download Manager; Genuine Service; and ColdFusion. Four of the bugs are rated critical in severity, with the others ranked as important. Most of the...
Large number of linux vulnerabilities in SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Siemens has published a large number of vulnerabilities in the Linux subsystem of the SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP. Malicious parties can exploit the vulnerabilities to cause various types of damage, the most important of which are: Execution of arbitrary code with privileges of the...
Report: Most Popular Home Routers Have ‘Critical’ Flaws
A security review of 127 popular home routers found most contained at least one critical security flaw, according to researchers. The “Home Router Security Report” PDF by Peter Weidenbach and Johannes vom Dorp—both from the German think tank Fraunhofer Institute–found that not only did all of the...
Hacking smart devices to convince dementia sufferers to overdose
Weve looked at numerous smart tracker watches over recent years. All had some disastrous security flaws. However, we found one recently that was a little different: it was aimed at the elderly, particularly those with dementia or other cognitive impairments. If the wearer goes for a walk and...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...
The vulnerability of the entry page for the personal archive in Cgi/private.py of the GNU Mailman mailing system allows a intruder to inject arbitrary content.
The vulnerability of the entry page for the personal archive in Cgi/private.py of the GNU Mailman system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary content using a specially created request...
Citrix Issues Critical Patches for 11 New Flaws Affecting Multiple Products
Citrix yesterday issued new security patches for as many as 11 security flaws that affect its Citrix Application Delivery Controller ADC, Gateway, and SD-WAN WAN Optimization edition WANOP networking products. Successful exploitation of these critical flaws could let unauthenticated attackers...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion flaws, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data conversion deficiencies. Exploiting these vulnerabilities can allow attacker...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve an exploit that allows an attacker to execute arbitrary code. This exploit relies on a flaw in memory management, enabling the attacker to perform unauthorized operations.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerabili...
Vulnerabilities fixed in Samba
Several vulnerabilities have been fixed in Samba. The vulnerabilities are in the way Samba processes LDAP information and allows a malicious party to cause a denial-of-service cause or potentially execute arbitrary code with the rights of the application. -= Ubuntu =- Canonical has made updates...
The vulnerability of the software update service for Cisco Webex Meetings Desktop App allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the software update service for the Cisco Webex Meetings Desktop App is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Critical Apache Guacamole Flaws Put Remote Desktops at Risk of Hacking
A new research has uncovered multiple critical reverse RDP vulnerabilities in Apache Guacamole, a popular remote desktop application used by system administrators to access and manage Windows and Linux machines remotely. The reported flaws could potentially let bad actors achieve full control ove...
Cisco Warns of High-Severity Bug in Small Business Switch Lineup
Cisco Systems is warning of a high-severity flaw affecting more than a half-dozen of its small business switches. The flaw could allow remote, unauthenticated attackers to access the switches’ management interfaces with administrative privileges. Specifically affected are Series Smart Switches,...