3191 matches found
[SECURITY] Fedora 30 Update: djvulibre-3.5.27-16.fc30
DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...
[SECURITY] Fedora 30 Update: djvulibre-3.5.27-15.fc30
DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...
CVE-2019-16951
A remote file include RFI issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one's own domain name. When the product calls this domain after the POST request is sent, it retrieves an attacker's data and displays it. Also worth mentioning is the amou...
Description of the security update for Office Online Server: November 12, 2019
None None...
Description of the security update for SharePoint Server 2010: November 12, 2019
Description of the security update for SharePoint Server 2010: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Comm...
Description of the security update for SharePoint Enterprise Server 2013: November 12, 2019
None None...
macOS XNU - Missing Locking in checkdirs_callback() Enables Race with fchdir_common() Exploit
On macOS, when a new mount point is created, the kernel uses checkdirs to, as a comment above the function explains: "Scan all active processes to see if any of them have a current or root directory onto which the new filesystem has just been mounted. If so, replace them with the new mount point....
McAfee Total Protection Information Disclosure Vulnerability
McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An information disclosure vulnerability exists in McAfee MTP 16.0.R21 and prior versions, which can be exploited by an attacker to read the plaintext list of AV-Scan excluded files from the Windows...
CVE-2019-3636
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
Verizon, AT&T, Sprint and T-Mobile to replace SMS with RCS Messaging in 2020
Mobile carriers in the United States will finally offer a universal cross-carrier communication standard for the next-generation RCS messaging service that is meant to replace SMS and has the potential to change the way consumers interact with brands for years to come. All major United States...
EOL D-Link Routers Vulnerable to Remote Command Execution
The CERT Coordination Center CERT/CC has released information on a vulnerability CVE-2019-16920 affecting multiple D-Link routers. A remote attacker could exploit this vulnerability to take control of an affected device. D-Link no longer provides support to the affected end-of-life EOL devices, a...
Fujitsu Wireless Keyboard Plagued By Unpatched Flaws
Two high-severity flaws, discovered in a popular Fujitsu wireless keyboard set, could allow attackers from a short distance away to “eavesdrop” on passwords entered into the keyboards, or even fully takeover a victim’s system. Making matters worse, the impacted Fujitsu wireless keyboard LX390...
IBM Workload Scheduler Distributed Elevation of Privilege Vulnerability
IBM Workload Scheduler Distributed is a suite of enterprise task scheduling software from IBM in the United States. The software automates the control of workloads. An elevation of privilege vulnerability exists in IBM Workload Scheduler Distributed, which can be exploited by a local attacker to...
CVE-2019-16520
The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...
Pulse Secure VPN contains multiple vulnerabilities
Overview Pulse Secure SSL VPN contains multiple vulnerabilities that can allow remote unauthenticated remote attacker to compromise the VPN server and connected clients. Description Pulse Secure released an out-of-cycle advisory along with software patches for the various affected products on Apr...
Uplay 92.0.0.6280 - Local Privilege Escalation Vulnerability
Exploit Title: Uplay 92.0.0.6280 - Local Privilege Escalation Exploit Author: Kusol Watchara-Apanukorn, Pongtorn Angsuchotmetee, Manich Koomsusi Vendor Homepage: https://uplay.ubisoft.com/ Version: 92.0.0.6280 Tested on: Windows 10 x64 CVE : N/A Vulnerability Description: "C:\Program Files...
CVE-2019-14657
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...
Design/Logic Flaw
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...
CVE-2019-14657
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...
Description of the security update for Excel 2010: October 8, 2019
Description of the security update for Excel 2010: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software fails to correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...