8687 matches found
CVE-2014-4835
IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...
CVE-2014-4835: Exposure of Sensitive Information to an Unauthorized Actor
IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...
Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update
Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman foreman-proxy katello-agent pulp pulp-nodes pulp-puppet pulp-rpm ruby193-rubygem-fog ruby193-rubygem-foreman-tasks packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is a system...
FirePassword - Firefox Username & Password Recovery Tool
FirePassword is first ever tool back in early 2007 released to recover the stored website login passwords from Firefox Browser. Like other browsers, Firefox also stores the login details such as username, password for every website visited by the user at the user consent. All these secret details...
Instant PDF Password Protector - Password Protect PDF file
Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...
Type confusion
The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...
CVE-2013-2604
CVE-2013-2604 affects RealNetworks GameHouse RealArcade Installer (ActiveMARK Game Installer) 2.6.0.481 and 3.0.7. The weakness is permissions in the GameHouse Games directory tree that allow local users to place a Trojan horse DLL (e.g., DDRAW.DLL) in an individual game’s directory, enabling pri...
CVE-2013-2604: Undefined Security Weakness
RealNetworks GameHouse RealArcade Installer aka ActiveMARK Game Installer 2.6.0.481 and 3.0.7 uses weak permissions Create Files/Write Data for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated...
CVE-2013-2603: Undefined Security Weakness
The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...
CVE-2014-9141
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...
CVE-2014-9141
CVE-2014-9141 affects Thomson Reuters Fixed Assets CS 13.1.4 and earlier. The installer exposes weak permissions on connectbgdl.exe, enabling a local user to modify the program and achieve arbitrary code execution. The vulnerability scope is local, with no user interaction required stated in the ...
CVE-2014-9141: Undefined Security Weakness
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...
PYSEC-2014-11
pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...
CVE-2014-4812
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port...
Privilege escalation
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...
CVE-2014-4073
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...
CVE-2014-4073: Undefined Security Weakness
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."...
Shellshock Exploits Spreading Mayhem Botnet Malware
The Mayhem malware piqued researchers’ interest earlier this summer after a published report from researchers at Russian search engine Yandex shed light on its ability to target Linux and UNIX machines and run under restricted privileges. Generally, web servers are well guarded against remote...