934 matches found
McAfee Advanced Threat Defense Elevation of Privilege Vulnerability
McAfee Advanced Threat Defense ATD is a suite of threat detection and defense solutions from the U.S.-based company McAfee McAfee. The solution provides malware analysis, shared threat intelligence, and isolation of compromised systems. The Web interface in McAfee ATD is vulnerable to a power...
Authentication flaw
Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...
CVE-2017-11171
Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...
The vulnerabilities of the graphical component of the Windows operating system, Skype for Business and Microsoft Lync messaging programs, the Microsoft Office suite of programs, and the Silverlight software platform allow a perpetrator to execute arbitrary code.
The vulnerability of the graphical component of the Windows operating system, the Skype for Business and Microsoft Lync messaging applications, the Microsoft Office suite, and the Silverlight software platform is related to object handling in memory. Exploiting this vulnerability allows a remote...
SAP GUI Security Bypass Vulnerability
SAP GUI is a graphical user interface client from SAP, Germany. A security bypass vulnerability exists in SAP GUI. A remote attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Cisco Identity Services Engine Denial of Service Vulnerability
Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A denial of service...
Authconfig Information Disclosure Vulnerability
Authconfig is a graphical and command line utility program. The program can provide basic client configuration for LDAP, Kerberos 5 and Winbind. An information disclosure vulnerability exists in Authconfig version 6.2.8. A remote attacker could exploit this vulnerability to disclose the existence...
openSUSE Security Update : qemu (openSUSE-2017-589)
This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-2620: In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation bsc1024972 -...
Oracle GlassFish Server 3.1.2 Multiple Vulnerabilities
Oracle GlassFish Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Schneider Electric Interactive Graphical SCADA DLL Load Remote Code Execution Vulnerability
Schneider Electric Interactive Graphical SCADA System Software is a suite of automation software for process control and supervision of SCADA systems from the French company Schneider Electric SchneiderElectric. A DLL loading remote code execution vulnerability exists in Schneider Electric...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
[SECURITY] Fedora 26 Update: R-3.3.3-1.fc26
This is a metapackage that provides both core R userspace and all R development components. R is a language and environment for statistical computing and graphics. R is similar to the award-winning S system, which was developed at Bell Laboratories by John Chambers et al. It provides a wide varie...
The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory, cause a service failure, or have other adverse effects on the system.
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting locally, to obtain confidential information from the process’s memory, cause a service failure...
PloitKit - The Hacker's ToolBox
PloitKit is a Python based GUI tool designed as one-stop for all other softwares. I was facing these kinds of problem, when I need to switch to different system, or I lost my pen-drive. I have to go to google, and search every tool and download every tool and so on. So I decided to create a tool,...
SAP GUI Remote Code Execution Vulnerability
SAP GUI is a graphical user interface client from SAP, Germany. A remote code execution vulnerability exists in SAP GUI. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected program...
[SECURITY] Fedora 25 Update: qbittorrent-3.3.11-1.fc25
A Bittorrent client using rblibtorrent and a Qt4 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...
MTR - A Network Diagnostic Tool
MTR combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. After it determines the address of each network hop between the...
