61 matches found
FireEye MPS JAR analyzer command execution
Added: 12/28/2015 BID: 78809 Background The FireEye Malware Protection System MPS detects and eliminates malware found on file shares, web downloads, and e-mail. Problem A vulnerability in the Java Archive analysis tool could allow command execution when the tool analyzes a specially crafted JAR...
FireEye MPS JAR analyzer command execution
Added: 12/28/2015 BID: 78809 Background The FireEye Malware Protection System MPS detects and eliminates malware found on file shares, web downloads, and e-mail. Problem A vulnerability in the Java Archive analysis tool could allow command execution when the tool analyzes a specially crafted JAR...
FireEye - Wormable Remote Code Execution in MIP JAR Analysis
Source: https://code.google.com/p/google-security-research/issues/detail?id=666 The FireEye MPS Malware Protection System is vulnerable to a remote code execution vulnerability, simply from monitoring hostile traffic. FireEye is designed to operate as a passive network tap, so that it can see all...
Eaton Cooper Power Systems ProView Man-in-the-Middle Attack Vulnerability
Eaton Cooper Power Systems ProView is a power protection system from Eaton Corporation of America. Eaton Cooper Power Systems ProView 4.0 Version 5.0 prior to 5.0 11 on Form 6 controls Idea IdeaPLUS relays generates TCP initial sequence number values linearly Existing Man-in-the-middle attack...
Microsoft Interflow Information-Sharing Platform Preview Open
Much like the Year of PKI that has never come to be, information sharing has been one of security’s more infamous non-starters. While successful in heavily siloed environments such as financial services, enterprises industry-wide are hesitant to share threat and security data for fear of losing a...
[Umap] The USB host security assessment tool
umap is a tool which allows you to test the security of USB host implementations i.e. something you plug a USB device into, like a PC or a tablet. Its primary function at the moment is a fuzzer with test cases based on a combination of data from standards documentation and the author's experience...
FireEye Web MPS GUI Detection
The remote web server is the FireEye Web Malware Protection System MPS GUI, which provides a web-based configuration interface for a FireEye Web MPS appliance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70295; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25";...
VMware View critical directory traversal vulnerability
DDI Vulnerability Research Team VRT for reported a critical vulnerability in VMware View Server , that is a directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive...
VMware View critical directory traversal vulnerability
DDI Vulnerability Research Team VRT for reported a critical vulnerability in VMware View Server , that is a directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive...
Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed...
Update Protection against EMC RepliStor rep_srv and ctrlservice Denial of Service
A denial of service vulnerability exists in EMC RepliStor. EMC RepliStor is a data recovery and protection system designed for Microsoft Windows. The vulnerability is due to an input validation error while parsing a specially crafted packet sent to 'repsrv.exe' and 'ctrlservice.exe' services...
F-Secure Anti-Virus Client Security本地格式串处理漏洞
F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统，支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞，如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话，就可以读写任意内存，并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...
ROS-2-3026
2.3026 Notification on update of the Anti-Malware Protection System "RED OS" No. RU.29926343.02.01-01-24 RED SOFT LLC notifies about the completion of the testing procedure and release of the updated RED OS 7.3 distribution. In order to update your copy of RED OS to the current state, you need to...
Security update 1970-01-01
...
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2008 SP2 for Itanium-based Systems (KB2804580)
A security issue has been identified that could allow an attacker to misrepresent a system action or behavior without the knowledge of the user. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...
Security Update for Windows XP (KB920685)
A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...
Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB3037578)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2022-12 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB5021288)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Security Update for Windows Server 2008 R2 x64 Edition (KB3019215)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...