Authorization Bypass

powershell is vulnerable to authorization bypass. An attacker is able to bypass Device Guard due to a flaw in the security feature...

The vulnerability of the Guard.sys driver of the information protection system against unauthorized access by intruders, allowing attackers to gain administrator privileges.

The vulnerability of the Guard.sys driver of the information protection system against unauthorized access is related to deficiencies in the algorithm used to calculate the checksum of the LOGONINFO structure. Exploiting this vulnerability could allow a local attacker to gain administrator...

U.S. Coast Guard Releases Cybersecurity Measures for Commercial Vessels

The U.S. Coast Guard has released a Safety Alert with recommended cybersecurity best practices for commercial vessels. With a dynamic cybersecurity threat landscape and growing reliance on technology to support vessels, the maritime community can help strengthen their defenses by implementing the...

CVE-2018-10986

OX Guard 2.8.0 has CSRF...

CVE-2018-10986

OX Guard 2.8.0 has CSRF...

Cross site request forgery (csrf)

OX Guard 2.8.0 has CSRF...

CVE-2018-10986

CVE-2018-10986: OX Guard 2.8.0 is affected by a CSRF vulnerability. The CVSSv3 base score is 8.8 (HIGH) with network access, low attack complexity, and user interaction required; impacts include Confidentiality, Integrity, and Availability (all HIGH).

CVE-2018-10986

OX Guard 2.8.0 has CSRF...

CVE-2019-13050

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service...

UBUNTU-CVE-2019-13050

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service...

The vulnerabilities of the Intel SGX driver for Linux and the Intel SGX DCAP Linux driver are related to insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Intel SGX driver for Linux and the Intel SGX DCAP Linux driver is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Intel SGX Driver Input Validation Error Vulnerability

Intel SGX driver is a SGX Intel Software Security Extensions driver from Intel USA. An input validation error vulnerability exists in the Intel SGX driver. An attacker could exploit this vulnerability to cause a denial of service...

KLA11039 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...

Researcher Exploits Microsoft's Notepad to 'Pop a Shell'

A memory corruption bug in the Microsoft’s Windows Notepad application can be used to open remote shell access – typically a first step for attackers infiltrating a system. The bug was found by Tavis Ormandy, a bug hunter with Google’s Project Zero team. In a tweet he indicated that the bug was...

USN-3998-1 evolution-data-server vulnerability

Marcus Brinkmann discovered that Evolution Data Server did not correctly interpret the output from GPG when decrypting encrypted messages. Under certain circumstances, this could result in displaying clear-text portions of encrypted messages as though they were encrypted...

New browser extensions for integrating Microsoft’s hardware-based isolation

The hardware-based isolation technology on Windows 10 that allows Microsoft Edge to isolate browser-based attacks is now available as a browser extension for Google Chrome and Mozilla Firefox. We introduced the container technology in 2017. Since then, we have been evolving the technology and...

May 21, 2019—KB4497934 (OS Build OS 17763.529)

None None...

May 21, 2019—KB4499183 (OS Build 17134.799)

None None...

PT-2019-12101 · Rockwell Automation · Compactlogix 5370 +2

Name of the Vulnerable Software and Affected Versions: CompactLogix 5370 L1, L2, and L3 Controllers versions 20 through 30 Compact GuardLogix 5370 controllers versions 20 through 30 Armor Compact GuardLogix 5370 Controllers versions 20 through 30 Description: An attacker could send crafted SMTP...

Oracle WebLogic remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 04 on 17 May, the National information security vulnerabilities sharing platform CNVD official released a security Bulletin called Oracle WebLogic wls9-async components deserialization of a remote command execution vulnerability, an attacker can use this vulnerability, unauthorized remote...