2822 matches found
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC-Net II Ethernet Controller emulation received certain packets in loopback mode. A privileged user with the CAPSYSRAWIO capability inside a guest could use this flaw to crash the host...
[SECURITY] Fedora 28 Update: beep-1.3-26.fc28
Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of...
[SECURITY] Fedora 29 Update: beep-1.3-26.fc29
Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of...
CVE-2018-16183
An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...
Design/Logic Flaw
An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...
CVE-2018-16183
An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...
CVE-2018-16183
CVE-2018-16183 details an unquoted service path vulnerability in Panasonic PCs with pre-installed applications running Windows 7/8/8.1/10 (from Oct 2009 onward). The root cause is services started with unquoted file paths (CWE-428), which could allow local attackers to execute a Trojan horse exec...
CVE-2018-16183: Unquoted Search Path or Element
An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...
pc-magazine.biz XSS vulnerability
Open Bug Bounty ID: OBB-703809 Description| Value ---|--- Affected Website:| pc-magazine.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
CVE-2018-16160
SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...
CVE-2018-16160
SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...
Authentication flaw
SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...
CVE-2018-0690
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...
CVE-2018-0690
CVE-2018-0690 affects Sony Music Center for PC prior to 1.0.02, where the software update process does not validate updates securely. This enables a man-in-the-middle attacker to tamper with an update file and inject executable files during the update, potentially leading to code execution on the...
CVE-2018-16160
CVE-2018-16160 affects SecureCore Standard Edition Version 2.x. An authentication bypass allows an attacker to log in to a Windows PC via a flaw in the product’s authentication mechanism (CWE-287). Affected product: SecureCore Standard Edition 2.x running on Windows (Windows 8/8.1 noted in JVN). ...
CVE-2018-16160
SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...
PT-2018-9016
Name of the Vulnerable Software and Affected Versions Music Center for PC versions 1.0.02 and earlier Description The issue is related to an unvalidated software update vulnerability. This could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...
CVE-2018-0690: Undefined Security Weakness
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...
PT-2018-13433
Name of the Vulnerable Software and Affected Versions SecureCore Standard Edition versions 2.x Description The issue allows an attacker to bypass authentication and log in to a Windows PC. Recommendations For SecureCore Standard Edition versions 2.x, at the moment, there is no information about a...