Spoofing

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687...

CVE-2019-14687

CVE-2019-14687 concerns Trend Micro Password Manager 5.0. The connected sources describe a DLL hijacking vulnerability that would allow an attacker to load an arbitrary unsigned DLL into the signed Password Manager service process. This entry is very similar to CVE-2019-14684 and shares the same ...

CVE-2019-14687

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684...

CVE-2019-14684

The CVE-2019-14684 entry describes a DLL hijacking vulnerability in Trend Micro Password Manager 5.0 that could allow loading an arbitrary unsigned DLL into the signed service’s process. The root cause is a DLL search/load issue (hijack) within the Password Manager’s service, enabling potential a...

CVE-2019-14684

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687...

CVE-2019-14687: Uncontrolled Search Path Element

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684...

CVE-2019-14684: Uncontrolled Search Path Element

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687...

PT-2019-13780

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager version 5.0 Description A DLL hijacking issue exists, allowing an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is similar to a previously known issue. Recommendations F...

PT-2019-13783

Name of the Vulnerable Software and Affected Versions Trend Micro Password Manager version 5.0 Description A DLL hijacking issue exists, allowing an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is similar to a previously known issue. Recommendations F...

Fuji Electric Alpha5 Smart Loader

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: Alpha5 Smart Loader Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of...

CVE-2019-11652

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

CVE-2019-11652

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

Authorization

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

CVE-2019-11652

CVE-2019-11652 affects Micro Focus Self Service Password Reset (SSPR). A potential authorization bypass vulnerability exists in SSPR versions prior to 4.4.0.3, 4.3.0.6, and 4.2.0.6. The remediation is to upgrade to SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate. The connected RH/CVE an...

CVE-2019-11652

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

PT-2019-12455

Name of the Vulnerable Software and Affected Versions Micro Focus Self Service Password Reset SSPR versions prior to 4.4.0.3 Micro Focus Self Service Password Reset SSPR versions prior to 4.3.0.6 Micro Focus Self Service Password Reset SSPR versions prior to 4.2.0.6 Description A potential...

CVE-2019-11652: Undefined Security Weakness

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

Tips for Successful Zero-Trust Implementation

The zero-trust concept is often and pithily summarized as “trust no one, verify everything.” No enterprise can stave off the myriad of cyberthreats as long as they assume that any individual element can be trusted as secure. No traffic, whether internal or external, can automatically be deemed...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0085)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - A use-after-free vulnerability was found in the way the Linux kernel's KVM hypervisor emulates a preemption timer for L2 guests when nested =1...

NewStart CGSL MAIN 4.06 : libvirt Multiple Vulnerabilities (NS-SA-2019-0089)

The remote NewStart CGSL host, running version MAIN 4.06, has libvirt packages installed that are affected by multiple vulnerabilities: - Modern Intel microprocessors implement hardware-level micro-optimizations to improve the performance of writing data back to CPU caches. The write operation is...