6770 matches found
PT-2017-1936 · Microsoft · Windows Server 2012 +9
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 10 and Windows Server 2016, including Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1 Description: The vulnerabilit...
PT-2017-17364 · Audiofile +2 · Audio File Library +2
Name of the Vulnerable Software and Affected Versions: Audio File Library aka audiofile version 0.3.6 Description: The issue allows remote attackers to cause a denial of service crash via vectors related to a large number of coefficients. This is related to the WAVE.cpp file in the Audio File...
Microsoft Internet Explorer CVE-2017-0040 Scripting Engine Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...
Microsoft Windows Uniscribe CVE-2017-0092 Information Disclosure Vulnerability
Description Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...
Microsoft Windows Uniscribe CVE-2017-0086 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed explo...
PT-2017-2104
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.x through 2.3.31 Apache Struts versions 2.5.x through 2.5.10 Description The Jakarta Multipart parser in Apache Struts 2 has incorrect exception handling and error-message generation during file-upload attempts, whic...
PT-2017-16798 · Zziplib +3 · Zziplib +3
Name of the Vulnerable Software and Affected Versions: zziplib versions 0.13.56 through 0.13.62 Description: The issue is related to a heap-based buffer overflow in the zzip get32 function, located in the fetch.c file of zziplib. This allows remote attackers to cause a denial of service, resultin...
SSL 3.0 POODLE（CVE-2014-3566）
SSL 3.0 POODLE attack information disclosure VulnerabilityCVE-2014-3566 Release date: 2014-10-14 Update date: 2014-10-16 Affected system: Netscape ssl 3.0 Netscape tls Not affected system: Netscape tls 1.2 Netscape tls 1.1 Netscape tls 1.0 Description: CVECAN ID: CVE-2014-3566 SSL3. 0 is an...
LocalTapiola: Test Page available with Server details on /r/test (viestinta.lahitapiola.fi)
Basic report information Summary: The default test page http://viestinta.lahitapiola.fi/r/test is accessible and presents the Adobe Campaign build info 8705 - not the latest version, and the installed instance name 'ac61tapiola'. Description: Self explanatory. Domain: viestinta.lahitapiola.fi...
New Trojan Turns Thousands Of Linux Devices Into Proxy Servers
"Linux doesn't get viruses" — It's a Myth. A new Trojan has been discovered in the wild that turns Linux-based devices into proxy servers, which attackers use to protect their identity while launching cyber attacks from the hijacked systems. Dubbed Linux.Proxy.10, the Trojan was first spotted at...
Network transmission PayPal is the exposure of"acquaintances can tamper with the password"deadly vulnerability-vulnerability warning-the black bar safety net
! This morning, the security client to the user feedback, the account is a friends login, and show the Bank card and the free password to pay functions can be normal use, very with devices, IP, environmental, geographical location, the truth in the end how? We know almost found on the relevant...
Microsoft Office CVE-2016-7290 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...
Microsoft Windows Kernel CVE-2016-7258 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems...
Microsoft Internet Explorer CVE-2016-7278 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...
Microsoft Office CVE-2016-7264 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2016 for Mac Microsoft Excel Viewer Microsoft Excel fo...
Microsoft Internet Explorer CVE-2016-7284 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer 10...
PT-2016-4672
Name of the Vulnerable Software and Affected Versions Debian versions prior to 1.0.9.8.4 Debian unstable versions prior to 1.4beta2 Ubuntu 14.04 LTS versions prior to 1.0.1ubuntu2.17 Ubuntu 16.04 LTS versions prior to 1.2.15ubuntu0.2 Ubuntu 16.10 versions prior to 1.3.2ubuntu0.1 Description The...
Error session termination mechanisms lead to account hijacking-vulnerability warning-the black bar safety net
Error session termination mechanisms Session termination is to secure the session period in one important aspect. Security implementation session tokens can effectively reduce the session hijacking attack. The session is terminated as the number of attack control mechanisms, such asXSS（cross-site...
PT-2016-3068
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.4 OpenSSH versions prior to 9.3p2 Description The issue is related to an untrusted search path vulnerability in the ssh-agent component of OpenSSH, which can be exploited by remote attackers to execute arbitrary loc...
Microsoft Windows CVE-2016-3343 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...