PT-2017-12192

Name of the Vulnerable Software and Affected Versions Boozt Fashion versions prior to 2.3.4 Description The issue allows remote attackers to read login credentials by sniffing the network due to the lack of SSL encryption. The vendor initially considered this an accepted risk, noting that only th...

CVE-2017-11706: Exposure of Sensitive Information to an Unauthorized Actor

The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...

The vulnerability of the multimedia player iTunes, allowing a intruder to execute arbitrary code in privileged context

The vulnerability of the multimedia player iTunes is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

Integer overflow

The gsallocrefarray function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document. This is related to a lack of an integer...

PT-2017-18933

Name of the Vulnerable Software and Affected Versions Intense PC Phoenix SecureCore UEFI firmware affected versions not specified Description The issue concerns the lack of capsule signature validation in the UEFI firmware before upgrading the system firmware. This absence of validation enables a...

PT-2017-12124

Name of the Vulnerable Software and Affected Versions Cisco DDR2200 ADSL2+ Residential Gateway version V00.00.03.45.4E Cisco DDR2201v1 ADSL2+ Residential Gateway version V00.00.03.28.3 Description The issue concerns a lack of access control for various command files on the affected devices,...

CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

PT-2017-17133

Name of the Vulnerable Software and Affected Versions Televes COAXDATA GATEWAY 1Gbps version doc-wifi-hgw v1.02.0014 4.20 Description The issue is related to the backup/restore feature, which lacks access control. This is connected to the ReadFile.cgi and LoadCfgFile functions. Recommendations Fo...

CVE-2017-9245: Exposure of Sensitive Information to an Unauthorized Actor

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

PT-2017-18802

Name of the Vulnerable Software and Affected Versions Google News and Weather application versions prior to 3.3.1 Description The issue allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL. Recommendations For versions prior to 3.3.1, update to versi...

Design/Logic Flaw

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Foxit Reader AFParseDateEx Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFParseDateEx...

PT-2017-12585

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 10.0 through 10.1 Description The issue allows anonymous users to access protected areas due to a lack of authentication check for a critical resource or functionality. Recommendations For IBM Security Guardium...

Today’s File Security is So ’80s, Part 3: Dynamic Peer Groups – 3 Examples from Customer Data

In the first two parts of this series, we discussed why permissions management, the traditional approach to file security, no longer works and introduced a new approach to file security that leverages machine learning to build dynamic peer groups based on how users actually access files. In this...

Ubiquiti Inc.: Privilege Escalation: From operator to ubnt (and root) with non-interactive Session Hijacking

EdgeOS version 1.9.1 and prior, consequence of lack of protection if the file-system, exposing sensitive information, an attacker with access to an operator read-only account, can escalate privileges to admin root access in the system...

PT-2017-7874

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue concerns a lack of validation for secure applications in Android releases that utilize the Linux kernel, specifically those from CAF. Recommendations At the moment, there is no...