151 matches found
EUVD-2006-1836
Malware in sbrugna...
EUVD-2005-2767
Malware in sbrugna...
EUVD-2014-1719
Malware in sbrugna...
EUVD-2012-0340
Malware in sbrugna...
Foxconn FOX LiveUpdate Utility Security Vulnerability
Foxconn FOX LiveUpdate Utility is a series of motherboard utilities from Foxconn China. A security vulnerability exists in Foxconn FOX LiveUpdate Utility version 2.1.6.26, which stems from a security issue discovered in the MmMapIoSpace routine that allows a local attacker to elevate privileges...
The vulnerabilities of the System Control Interface and AsusSwitch drivers, along with the AsusLiveUpdate.dll library for Windows operating systems, allow a hacker to write or delete any files from the Temp directory.
The vulnerability of the System Control Interface and AsusSwitch drivers, as well as the AsusLiveUpdate.dll library for Windows operating systems, is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker to write or delete any files from the Temp directory...
JVN#40667528: Norton Download Manager may insecurely load Dynamic Link Libraries
Norton Download Manager provided by Symantec Japan, Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be executed with the privileges of the user running the application. Solution Use the latest Norton Download...
Symantec Norton Internet Security Decomposer Engine Multiple Parsing Vulnerabilities
Symantec Norton Internet Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Norton AntiVirus Decomposer Engine Multiple Parsing Vulnerabilities
Symantec Norton AntiVirus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Norton 360 Decomposer Engine Multiple Parsing Vulnerabilities
Symantec Norton 360 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:symantec:norton360";...
Symantec LiveUpdate Administrator Management GUI HTML Injection
No description provided by source. Source: http://www.securityfocus.com/bid/46856/info Symantec LiveUpdate Administrator is prone to an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected application, potentiall...
Symantec LiveUpdate Administrator Security Bypass (CVE-2014-1644)
A security policy bypass vulnerability exists in Symantec LiveUpdate Administrator. The vulnerability is due to a failure to validate temporary passwords when processing a user account password reset. A remote unauthenticated attacker could exploit this vulnerability by sending a malicious reques...
Symantec LiveUpdate Administrator Multiple Vulnerabilities
Symantec LiveUpdate Administrator is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec LiveUpdate Administrator Version Detection
Detects the installed version of Symantec LiveUpdate Administrator. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Symantec LiveUpdate Administrator SQL注入漏洞
Bugtraq ID:66400 CVE ID:CVE-2014-1645 Symantec LiveUpdate Administrator是一款Symantec产品升级管理程序。 Symantec LiveUpdate Administrator管理GUI不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 Symantec LiveUpdate Administrator 2.x Symantec LiveUpdate Administrator 2.3.2.110已经修复该漏洞，建议用户下载更新：...
Symantec LiveUpdate Administrator security vulnerabilities
Unaurhorized access, SQL injection...
Symantec LiveUpdate Administrator未授权访问漏洞
Bugtraq ID:66399 CVE ID:CVE-2014-1644 Symantec LiveUpdate Administrator是一款Symantec产品升级管理程序。 Symantec LiveUpdate Administrator管理GUI对登录/密码功能提供不正确的保护，允许攻击者在知道目标用户email地址的情况下，利用重置密码功能重置用户密码，未授权进行访问。 0 Symantec LiveUpdate Administrator 2.x Symantec LiveUpdate Administrator 2.3.2.110已经修复该漏洞，建议用户下载更新：...
SEC Consult SA-20140328-0 :: Multiple vulnerabilities in Symantec LiveUpdate Administrator
SEC Consult Vulnerability Lab Security Advisory 20140328-0 ======================================================================= title: Multiple critical vulnerabilities product: Symantec LiveUpdate Administrator vulnerable version: = 2.3.2.99 fixed version: 2.3.2.110 impact: critical CVE numbe...
Symantec LiveUpdate Administrator < 2.3.2.110 Multiple Vulnerabilities (SYM14-005)
The version of Symantec LiveUpdate Administrator 2.x hosted on the remote web server is prior to 2.3.2.110 2.3.2.1. It is, therefore, affected by the following vulnerabilities : - A flaw exists with the forgotten password functionality where the password for an authorized user account can be...
CVE-2014-1644
The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator LUA 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account...