Lucene search
K

5020 matches found

Citrix
Citrix
added 2017/12/04 12:0 a.m.6 views

Error: "ProcessAttribute: failed getting 135292-byte attribute"- When Copying Folders Recursively

The import task will fail with this: The CachePoint Appliance could not import the gold image VM to create the Operating System Layer. Error is: Failed to copy folders recursively. Details: Note there are other reasons you could have a failure to copy files recursively.Always check UniSysLibLog f...

7AI score
Exploits0
Citrix
Citrix
added 2017/11/24 12:0 a.m.6 views

Citrix *Client Folder Redirection* (CFR) is not *Folder Redirection*

Client Folder Redirection, Folder Redirection and Special Folder Redirection are not the same. Client Folder Redirection CFR provides access to client-side folders in an ICA session while not having to redirect complete client-side drives. Support throughClient Drive Mapping CDM has enabled...

7.1AI score
Exploits0
Fedora
Fedora
added 2017/11/20 1:4 a.m.30 views

[SECURITY] Fedora 27 Update: roundcubemail-1.3.3-1.fc27

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

7.8CVSS0.2AI score0.35939EPSS
Exploits5
OSV
OSV
added 2017/11/16 3:29 p.m.1 views

CVE-2017-16560

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes...

4.3CVSS5.8AI score0.00058EPSS
Exploits0References1
Prion
Prion
added 2017/11/16 3:29 p.m.9 views

Input validation

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes...

2.1CVSS4.6AI score0.00058EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2017/11/16 3:29 p.m.1 views

CVE-2017-16560

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes...

4.3CVSS5.5AI score0.00058EPSS
Exploits0References3
CVE
CVE
added 2017/11/16 3:0 p.m.49 views

CVE-2017-16560

The SanDisk Secure Access 3.01 vault may decrypt and copy encrypted files to a temporary folder, leaving plaintext copies on disk indefinitely in certain scenarios (e.g., when editing a file or after a crash). This stems from temporary plaintext files retained on disk. Affected product: SanDisk S...

4.3CVSS4.6AI score0.00058EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/11/16 3:0 p.m.18 views

CVE-2017-16560

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes...

4.6AI score0.00058EPSS
Exploits0References1
Trend Micro Simply Security
Trend Micro Simply Security
added 2017/10/27 4:50 p.m.47 views

Bad Rabbit Ransomware – What is it and how to stay safe

Trend Micro is tracking multiple reports of ransomware infections, known as Bad Rabbit, in many countries around the world. A suspected variant of Petya, Bad Rabbit is ransomware—malicious software that infects a computer and restricts user access to the infected machine until a ransom is paid to...

6.8AI score
Exploits0
UbuntuCve
UbuntuCve
added 2017/10/27 5:29 a.m.28 views

CVE-2017-5081

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files...

3.3CVSS6.8AI score0.00025EPSS
Exploits0References2
OSV
OSV
added 2017/10/27 5:29 a.m.0 views

UBUNTU-CVE-2017-5081

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files...

3.3CVSS6.7AI score0.00025EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2017/10/27 5:0 a.m.20 views

CVE-2017-5081

Removed by vendor...

3.3CVSS7.4AI score0.00025EPSS
Exploits0
Drupal
Drupal
added 2017/10/25 12:0 a.m.19 views

Brilliant Gallery - Highly critical - Multiple Vulnerabilities - SA-CONTRIB-2017-079

This module enables you to display any number of galleries based on images located in the files folder. The module doesn't sufficiently sanitize various database queries which may allow attackers to craft requests resulting in an SQL injection vulnerability. This vulnerability could be exploited...

6.8AI score
Exploits0References5
0day.today
0day.today
added 2017/10/25 12:0 a.m.33 views

Windows NTLM Auth Hash Disclosure / Denial Of Service Vulnerabilities

Under certain circumstances a shared folder on Windows can be abused remotely to obtain the user credentials and to freeze the machine. Hello, I want to share some information with the people on the list. On May 24, I found a problem with NTLM auth on Windows. Under certain circumstances a shared...

6.9AI score
Exploits0
Packet Storm
Packet Storm
added 2017/10/25 12:0 a.m.28 views

Windows NTLM Auth Hash Disclosure / Denial Of Service

Hello, I want to share some information with the people on the list. On May 24, I found a problem with NTLM auth on Windows. Under certain circumstances a shared folder on Windows can be abused remotely to obtain the user credentials and to freeze the machine. This was already reported to MSRC on...

7.1AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2017/10/23 1:5 p.m.4308 views

Windows Defender Exploit Guard: Reduce the attack surface against next-generation malware

Windows Defender Exploit Guard is a new set of intrusion prevention capabilities that ships with the Windows 10 Fall Creators Update. The four components of Windows Defender Exploit Guard are designed to lock down the device against a wide variety of attack vectors and block behaviors commonly us...

9.3CVSS8.5AI score0.93953EPSS
Exploits17
Hacker One
Hacker One
added 2017/10/17 12:8 p.m.11 views

Dropbox: Dropbox employee benefits documents are available in a test Dropbox folder

This report pointed out that we had left a shared link to a copy of our employee benefits documentation in a particular iOS build. This link was likely used for ad-hoc testing at some point and accidentally left in the build. While there is little security risk here, we removed the link from...

1.4AI score
Exploits0
Citrix
Citrix
added 2017/10/13 12:0 a.m.8 views

WEM 4.3 -Folder redirection discrepancy between "Quick Access" and "This PC"

When configuring WEM USV Settings for folder redirection inside WEM Administration Console, folder redirection settings are not properly applied per settings on WEM Agent machine. FOR EXAMPLE: All of the following folders, should be redirected and have been configured this way via the WEM...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2017/10/11 12:0 a.m.35 views

Trend Micro OfficeScan 11.0XG (12.0) - Remote Code Execution (Metasploit)

Trend Micro OfficeScan 11.0XG 12.0 - Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Trend Micro OfficeScan Remote Code Execution", 'Description' = %q This modul...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2017/10/11 12:0 a.m.72 views

Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Trend Micro OfficeScan Remote Code Execution", 'Description' = %q This module exploits the authentication bypass and command injection vulnerabili...

7.4AI score
Exploits0
Rows per page
Query Builder