CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZWASUSA009/ASUSA009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-keys and the Asus ZenFone 3 Max Android device with a build fingerprint of...

CVE-2018-14989

The Plum Compass Android device with a build fingerprint of PLUM/c179hwf221/c179hwf221:6.0/MRA58K/W16.51.5-22:user/release-keys contains a pre-installed platform app with a package name of com.android.settings versionCode=23, versionName=6.0-eng.root.20161223.224055 that contains an exported...

Oracle MySQL Connectors Installed (Linux)

Binary data mysqlconnectorsversionnix.nbin...

Google Warns of Growing Android Attack Vector: Backdoored SDKs and Pre-Installed Apps

Google is reporting an uptick in efforts by bad actors to plant potentially harmful applications PHAs on Android devices via pre-installed apps and by bundling them with system updates delivered over the air. The technique is especially troubling, Google said, because PHAs are often malicious and...

Cisco Common Services Platform Collector Pre-installed Account Access

The vulnerability of the device information collection tool in the Cisco Common Services Platform Collector relates to the presence of a pre-installed account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...

rdesktop Detection

Detects whether rdesktop is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

(0Day) (Pwn2Own) Google Android Contacts Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Google Android. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

Cisco Network Assurance Engine Disclosure DoS

The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

LogMeIn Client Installed (Windows)

Binary data logmeinclientwininstalled.nbin...

LogMeIn Control Panel Installed (Windows)

Binary data logmeincontrolpanelwininstalled.nbin...

CVE-2018-19638 User can overwrite arbitrary log files in support tar

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files...

Microsoft Visual Studio Isolated Shell Installed

Binary data microsoftvsisoshellinstalled.nbin...

PT-2019-5489

Name of the Vulnerable Software and Affected Versions ЭКОМ-3000 affected versions not specified Description The issue is related to the use of pre-installed credentials in the ЭКОМ-3000 data collection and transmission device. Exploitation of this issue could allow a remote attacker to gain acces...

Microsoft Visual Studio Code Installed

Binary data microsoftvisualstudiocodeinstalled.nbin...

Yokogawa CellActivision Detection (Windows SMB Login)

Detects the installed version of Yokogawa CellActivision for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPC UA Local Discovery Server Detection (Windows SMB Login)

Detects the installed version of OPC UA Local Discovery Server for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Advanced Threat Prevention DES Hashing Modifier Access

The vulnerability of Juniper Advanced Threat Prevention’s detection and prevention software lies in the use of the DES algorithm and a pre-installed modifier for password hashing. Exploiting this vulnerability could allow attackers to gain access to protected information...

Information Disclosure of Installed Extensions

More info at https://typo3.org/security/advisory/typo3-core-sa-2019-001...

Information Disclosure of Installed Extensions

More info at https://typo3.org/security/advisory/typo3-core-sa-2019-001...

Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...