SpotAuditor 'Key' Denial of Service Vulnerability

SpotAuditor is a useful password recovery software for recovering passwords stored in your computer, which is mainly used to get the list of passwords that have been saved in the local computer, the list of accessed URLs, and the list of launched programs. A denial of service vulnerability exists...

SpotAuditor 'Name' Denial of Service Vulnerability

SpotAuditor is a useful password recovery software for recovering passwords stored in your computer, which is mainly used to get the list of passwords that have been saved in the local computer, the list of accessed URLs, and the list of launched programs. A denial of service vulnerability exists...

Linux kernel buffer overflow vulnerability (CNVD-2019-42785)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer error vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product that performs operations in memory without properl...

TP-Link Archer C3200 and Archer C2 Input Validation Error Vulnerability

The TP-Link Archer C3200 and Archer C2 are both a wireless router from China's P&L TP-Link. An input validation error vulnerability exists in the TP-Link Archer C3200 and Archer C2, which can be exploited by an attacker to transfer data between two isolated network segments on the same device...

AdPlug Buffer Overflow Vulnerability (CNVD-2019-32337)

AdPlug is an AdLib sound player library written in C++. A buffer overflow vulnerability exists in the 'CdtmLoader::load' function of the dtm.cpp file in AdPlug version 2.3.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating dat...

XDR Needs Network Data and Here’s Why

As we’ve discussed in previous blogs, XDR is a better way to detect attacks within a network since it is able to coordinate and collaborate threat intelligence and data across multiple threat vectors, including endpoint including mobile and IIoT, server, network, messaging, web, and cloud. In thi...

Das U-Boot Buffer Overflow Vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer error vulnerability exists in Das U-Boot 2019.07 and earlier versions. The vulnerability stems...

GNU Debugger (GDB) Buffer Overflow Vulnerability

GNU gdb is a GNU Project debugger from the GNU Project. It supports debugging C, C++, Pascal, and FORTRAN programming languages. A buffer overflow vulnerability exists in the main module in GNU gdb. The vulnerability stems from a networked system or product that performs operations in memory...

OFFIS.de DCMTK Buffer Overflow Vulnerability

OFFIS.de DCMTK is a toolkit that implements the DICOM standard to inspect, build and convert DICOM image files, send and receive images over a network connection. A buffer overflow vulnerability exists in DcmRLEDecoder::decompress in OFFIS.de DCMTK 3.6.3 and earlier versions. The vulnerability...

uLaunchELF Buffer Overflow Vulnerability

uLaunchELF uLE is a file browser. A buffer overflow vulnerability exists in versions prior to uLaunchELF commit 170827a. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Quake3e Buffer Overflow Vulnerability

Quake3e is a Quake III Arena game engine. A buffer overflow vulnerability exists in versions prior to Quake3e 5ed740d. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Clam AntiVirus Input Validation Error Vulnerability

Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. An input validation error vulnerability exists in Clam AntiVirus. The vulnerability originates from a network system or product that does not properly valida...

Google Launches Backstory — A New Cyber Security Tool for Businesses

Google's one-year-old cybersecurity venture Chronicle today announced its first commercial product, called Backstory, a cloud-based enterprise-level threat analytics platform that has been designed to help companies quickly investigate incidents, pinpoint vulnerabilities and hunt for potential...

Learn How XDR Can Take Breach Protection Beyond Endpoint Security

How do you know whether an attacker has infiltrated your network? Can you really rely on an Endpoint Detection and Response EDR solution to be your go-to technology for identifying security breaches? Endpoint detection and response EDR platform has been an important technology to detect...

Learn How XDR Can Take Breach Protection Beyond Endpoint Security

How do you know whether an attacker has infiltrated your network? Can you really rely on an Endpoint Detection and Response EDR solution to be your go-to technology for identifying security breaches? Endpoint detection and response EDR platform has been an important technology to detect...

McAfee Network Security Manager and Network Data Loss Prevention Session Fixation Vulnerability

McAfee Network Security Manager NSM and Network Data Loss Prevention NDLP are both products from McAfee, Inc. McAfee Network Security Manager NSM is a network security solution that monitors in real time the deployment of McAfee Intrusion Prevention Systems throughout the network. network Data Lo...

CVE-2017-3968

Session fixation vulnerability in the web interface in McAfee Network Security Manager NSM before 8.2.7.42.2 and McAfee Network Data Loss Prevention NDLP before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie...

CVE-2017-3968 McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

Session fixation vulnerability in the web interface in McAfee Network Security Manager NSM before 8.2.7.42.2 and McAfee Network Data Loss Prevention NDLP before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie...

CVE-2017-3968

CVE-2017-3968 concerns a session fixation vulnerability in the web interface of McAfee Network Security Manager (NSM) and Network Data Loss Prevention (NDLP). The issue allows remote attackers to disclose sensitive information or manipulate the underlying database by exploiting a crafted authenti...

CVE-2018-10238

bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of packet-size validation. The affected component is bacserv BACnet/IP BVLC forwarded NPDU. The function bvlcbdtforwardnpdu calls bvlcencodeforwardednpdu which copies the content from...