Vulnerability in the Core Kernel of the Android operating system, allowing a intruder to gain access to protected information

The vulnerability in the Core Kernel of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the Secure File System (SFS), a secure file system in the Android operating system, allows a perpetrator to gain access to protected information and manage resources.

The vulnerability of the secure file system SFS in the Android operating system arises due to numerical overflow or cyclic shift. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information, manage resources, or execute programs...

Vulnerability in the Core Kernel of the Android operating system, allowing a intruder to gain access to protected information

The vulnerability in the Core Kernel of the Android operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the WCDMA component of the Android operating system, which allows a hacker to gain access to protected information

The vulnerability of the WCDMA component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

HPE SiteScope contains multiple vulnerabilities

Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...

FreeRADIUS Server TLS Authentication Bypass Vulnerability

FreeRadius is a set of software from the FreeRADIUS Server project that implements the RADIUS protocol. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...

Net Monitor for Employees Pro Unordered Service Path Privilege Escalation Vulnerability

NetMonitorForEmployeesProfessional is a remote employee monitoring software, it is a software application for PC platforms, the software size is 13362KB. An out-of-order service path privilege escalation vulnerability exists in Net Monitor for Employees Pro. The vulnerability stems from a "block...

Beware! This Microsoft PowerPoint Hack Installs Malware Without Requiring Macros

"Disable macros and always be extra careful when you manually enable it while opening Microsoft Office Word documents." You might have heard of above-mentioned security warning multiple times on the Internet as hackers usually leverage this decade old macros-based hacking technique to hack...

CVE-2016-10334

In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten...

DEBIAN-CVE-2017-9148

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers such as malicious 802.1X supplicants to bypass authentication via PE...

UBUNTU-CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

BD PerformA and KLA Journal Service Information Disclosure Vulnerability

BD PerformA and KLA Journal Service are both BD products for healthcare applications. The former is a set of applications for system monitoring; the latter is a set of applications for incremental backup. A security vulnerability exists in BD PerformA version 2.0.14.0 and earlier and KLA Journal...

Microsoft Windows ActiveX Control Local Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the instantiation of ActiveX objects in some versions of Windows, allowing an attacker to access protected memory...

OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a perpetrator to gain access to protected information.

The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to protected information in the process memory using specially crafted packets...

Apple macOS Sierra System Integrity Protection Input Validation Vulnerability

Apple macOS Sierra is an operating system developed by Apple for Mac computers.System Integrity Protection is one of the components of System Integrity Protection. An input validation vulnerability exists in the System Integrity Protection component in Apple macOS Sierra versions prior to 10.12.4...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the iTunes Store web service’s iTunes sandbox component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information ...

Office discovered zero vulnerabilities hackers can use the Word document to install malicious software-vulnerability warning-the black bar safety net

According to foreign media reports, recently a period of time, you when opening a Word document may have to be careful because the security company MCAfee researchers in Microsoft Office software found in a zero vulnerabilities, hackers can use it quietly in your computer system to install...

Design/Logic Flaw

The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backslashes...

CVE-2017-0204

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."...