3193 matches found
CVE-2018-16715
An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable EXE or dynamical...
Design/Logic Flaw
An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable EXE or dynamical...
Artifex Ghostscript Denial of Service Vulnerability (CNVD-2020-54475)
Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...
CVE-2018-16541
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter...
Design/Logic Flaw
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter...
CVE-2018-16541
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter...
Cb Protection 8.1 Makes Replacing Legacy Antivirus On Critical Systems and Servers Easier Than Ever
Cb Protection, has a long history of innovation in the market. Many have referred to Cb Protection as a pioneer in the application control market. Application control also known as whitelisting is used to lock down critical systems and servers. It's also one of the strongest forms of protection a...
Citrix Policy - Does applying same policies on different priorities append the policy settings?
Question : Citrix Policy - Does applying same policies on different priorities append the policy settings? Answer : No, applying same policy however different settings in them will not append it, however, it will replace the policy altogether. An example: We have defined the following policy twic...
Backdooring and Breaking Signatures: SMBetray
In SMB connections, the security mechanisms protecting the integrity of the data passed between the server and the client are SMB signing and encryption. The signatures in on SMB packets when SMB signing is used are based on keys derived from information sent over the net in cleartext during the...
CVE-2018-14795
DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files...
CVE-2018-14795
DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files...
Emerson Electric Deltav Path Traversal Vulnerability
Emerson Electric DeltaV is a digital automation system from Emerson Electric USA. The system offers I/O on-demand configuration, embedded intelligent control, and alarm panels. A path traversal vulnerability exists in Emerson Electric DeltaV, which stems from the program failing to properly...
GHSA-X7Q3-67VC-WVCF grunt-images downloads Resources over HTTP
Affected versions of grunt-images insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...
keycloak: infinite loop in session replacement leading to denial of service
keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the...
File (Field) Paths - Critical - Remote Code Execution - SA-CONTRIB-2018-056
This module enables you to automatically sort and rename your uploaded files using token based replacement patterns to maintain a nice clean filesystem. The module doesn't sufficiently sanitize the path while a new file is uploading, allowing a remote attacker to execute arbitrary PHP code. This...
Description of the security update for Word Viewer: August 14, 2018
None None...
Description of the security update for Excel 2016: August 14, 2018
None None...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: August 14, 2018
None None...
Description of the security update for SharePoint Server 2010: August 14, 2018
Description of the security update for SharePoint Server 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...