1563 matches found
JVN#41452671: The installers of multiple Canon IT Solutions Inc. software programs may insecurely load Dynamic Link Libraries
The installers of multiple software programs provided by Canon IT Solutions Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Us...
Cross site request forgery (csrf)
In MicroWorld eScan Internet Security Suite ISS for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD...
CIS Releases 2017 Year in Review
The Center for Internet Security CIS has released its 2017 Year in Review. CIS is home to the Multi-State Information Sharing and Analysis Center MS-ISAC, an NCCIC partner focused on cyber threat prevention, protection, response, and recovery for U.S. state, local, tribal, and territorial...
Security Bulletin: OpenSSL Heartbleed Vulnerability and Impact to Cognos Peformance Management Products
Summary OpenSSL Heartbleed Vulnerability OpenSSL 1.0.1 through 1.0.1f inclusive are vulnerable Vulnerability Details What is OpenSSL Heartbleed The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information...
AV-TEST’s April 2018 Windows Home User Test Report Shows 100% Protection Result and Top Product Award for Trend Micro Internet Security
Maintaining its Top Product protection rating, Trend Micro Internet Security 12.0 2018 continues to show 100% Protection results in tests conducted by the internationally respected testing lab AV-TEST.org. In its Mar-Apr 2018 test of 18 endpoint security products on Windows 10, the latest release...
This Week in Security News: Hacker Reports and Router Reboots
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, hackers warn Congress that internet security across software and computer networks are insecure. Also, a malware, dubbed VPNFilter, infected...
Are VPNs a thing of the past?
Attention world: In 2018, we officially surpassed 4 billion internet users1 - and there are no signs of adoption rate slowing down. Yet the Internet as we know it has only been around since the 1990s. Along with it, different iterations of virtual private networks VPNs have been created and...
Trend Micro Internet Security Multiple Vulnerabilities (May 2018) - Windows
Trend Micro Internet Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2013-3947
CVE-2013-3947 describes a buffer overflow in MedCoreD.sys within AhnLab V3 Internet Security 8.0.7.5 (Build 1373) that enables local privilege escalation via a crafted IOCTL call 0xA3350014. The vulnerability is triggered in the kernel-mode driver, with exploitation allowing an unprivileged user ...
CVE-2013-3947
Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 Build 1373 allows local users to gain privileges via a crafted 0xA3350014 IOCTL call...
Cloudflare’s new DNS service
Are you looking for a free way to speed up your internet and gain some extra privacy in the process? Keep reading, because Cloudflare the Web Performance & Security Company is offering a free new DNS service. And it helped me improve the speed of my DNS lookups. What is DNS? DNS is short for Doma...
Cybercriminals Hijack Router DNS to Distribute Android Banking Trojan
Security researchers have been warning about an ongoing malware campaign hijacking Internet routers to distribute Android banking malware that steals users' sensitive information, login credentials and the secret code for two-factor authentication. In order to trick victims into installing the...
tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...
tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...
CVE-2018-9151
A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...
Null pointer dereference
A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...
CVE-2018-9151
CVE-2018-9151 affects the Kingsoft Internet Security 9+ kernel driver KWatch3.sys, with a NULL pointer dereference in the function ObReferenceObjectByHandle. It allows local, non-privileged users to crash the system via IOCTL 0x80030030. The provided connected documents confirm the affected compo...
CVE-2018-9151
A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...
Omitting the “o” in .com Could Be Costly
Take care when typing a domain name into a browser address bar, because it's far too easy to fat-finger a key and wind up somewhere you don't want to go. For example, if you try to visit some of the most popular destinations on the Web but omit the "o" in .com and type .cm instead, there's a good...
