3290 matches found
A Google Drive 'Feature' Could Let Attackers Trick You Into Installing Malware
An unpatched security weakness in Google Drive could be exploited by malware attackers to distribute malicious files disguised as legitimate documents or images, enabling bad actors to perform spear-phishing attacks comparatively with a high success rate. The latest security issue—of which Google...
CVE-2020-12619
MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...
CVE-2020-12618
eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enable...
Code injection
MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the...
CVE-2020-12618
eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enable...
Philips SureSigns VS4
1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable remotely Vendor : Philips Equipment : SureSigns VS4 Vulnerabilities : Improper Input Validation, Improper Access Control, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker...
Rapid SCADA Local Elevation of Privilege Vulnerability
Rapid SCADA is a free, open source, full-featured SCADA data acquisition and monitoring system software. A local elevation of privilege vulnerability exists in the ScadaAgentSvc.exe executable file in Rapid SCADA 5.8.0. The vulnerability can be exploited to gain administrator privileges by placin...
Description of the security update for Outlook 2016: August 11, 2020
None None...
Description of the security update for SharePoint Foundation 2013: August 11, 2020
Description of the security update for SharePoint Foundation 2013: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for Excel 2010: August 11, 2020
Description of the security update for Excel 2010: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securit...
Description of the security update for Access 2010: August 11, 2020
Description of the security update for Access 2010: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office that could be exploited if a user opens a file that contains a malformed graphics image or inserts a malformed graphics...
Description of the security update for Outlook 2010: August 11, 2020
Description of the security update for Outlook 2010: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook when the software does not correctly handle objects in memory. It also resolves an information disclosure vulnerability...
Description of the security update for Office 2010: August 11, 2020
Description of the security update for Office 2010: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Access software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsof...
UBUNTU-CVE-2020-13295
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF...
CVE-2020-6012
ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...
PT-2020-18887 · Zonealarm · Zonealarm Anti-Ransomware
Name of the Vulnerable Software and Affected Versions: ZoneAlarm Anti-Ransomware versions prior to 1.0.713 Description: The issue allows a sophisticated timed attacker to replace files with malicious content, enabling an unprivileged user to escalate privileges via local access. This can be...
The vulnerability of the Configuration The Expedition Migration tool, which involves manipulating cross-site requests, allows a hacker to replace the user during a session and execute arbitrary code.
The vulnerability of the The Expedition Migration tool relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during an session and execute arbitrary code...
Description of the security update for SharePoint Enterprise Server 2013: July 14, 2020
None None...
Description of the security update for SharePoint Foundation 2013: July 14, 2020
Description of the security update for SharePoint Foundation 2013: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in PerformancePoint Services for SharePoint Server if the software does not check the source markup of XML file input. To learn...