736 matches found
[SECURITY] [DLA 2424-1] tzdata new upstream version
------------------------------------------------------------------------- Debian LTS Advisory DLA-2424-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...
Mozilla: Overriding file type when saving to disk
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...
Basecamp: stored XSS in hey.com message content
Hi I found a stored xss using messagecontent parameter when forwarding an email or saving it as draft , and when the victim click on the email to view it, it gets executed . I used this payload as the message content : From: "f" To: [email protected] Message-ID: Subject:...
The vulnerability of the fly-fm file manager, related to errors in saving permissions, allows a violator to gain access to confidential data.
The vulnerability of the fly-fm file manager is related to errors during permission saving. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Heat Measurement and Temperature Control Integration Analysis System of Shandong Lichuang Technology Co.
Shandong Lichuang Technology Co., Ltd. heating measurement and temperature control integrated analysis system is a data analysis system designed with energy saving, consumption reduction and cost saving as the starting point according to the current guiding direction of energy saving and emission...
May 12, 2020—KB4556854 (Security-only update)
None None...
Exploit for Insertion of Sensitive Information into Log File in Canonical Subiquity
CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. N...
August 11, 2015, update for Office 2010 (KB3054962)
August 11, 2015, update for Office 2010 KB3054962 This article describes update KB3054962 for Microsoft Office 2010 that was released on August 11, 2015. This update has a prerequisite. Improvements and fixes Fixes the following issue:When you open a file .xlsx, .pptx, or .docx and then save it a...
A Vital Hack Could Turn Medical Devices Into Ventilators
Hundreds of thousands of lower-grade breathing devices are going unused because manufacturers say they can’t perform life-saving functions. But a new patch might change that...
Description of the security update for SharePoint Server 2019: April 14, 2020
None None...
UBUNTU-CVE-2020-11669
An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idlebook3s.S does not have save/restore functionality for PNVPOWERSAVEAMR, PNVPOWERSAVEUAMOR, and PNVPOWERSAVEAMOR, aka CID-53a712bae5dd...
An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available
An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available INTRODUCTION This article introduces an update that provides new APIs for conversion between local time and Coordinated Universal Time UTC in Windows 7 or in Windows...
You cannot change the time and date if the time zone is set to Samoa (UTC+13:00) and KB 2657025 is installed in Windows 7 or in Windows Server 2008 R2
You cannot change the time and date if the time zone is set to Samoa UTC+13:00 and KB 2657025 is installed in Windows 7 or in Windows Server 2008 R2 Symptoms You receive the following error message: This time is not valid due to the Daylight Saving Time. Please choose a time before 1:00:00 AM or...
Why Our Customers Love VMware Carbon Black
As the cybersecurity world advances, organizations are starting to change their approach to security. More and more teams are moving to the cloud to maximize their endpoint protection and simplify their security stack. Using VMWare Carbon Black's Cloud platform, our customers are able to...
AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot
Exploit: AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot Date: 2019-12-30 Author: LiquidWorm Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Advisory ID: ZSL-2019-5548 Advisory URL:...
AVE DOMINAplus 1.10.x Unauthenticated Remote Reboot Vulnerability
AVE DOMINAplus =1.10.x Unauthenticated Remote Reboot Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 -...
AVE DOMINAplus 1.10.x Unauthenticated Remote Reboot
AVE DOMINAplus =1.10.x Unauthenticated Remote Reboot Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 -...
CVE-2019-17336
The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...
Vtiger CRM Elevation of Privilege Vulnerability
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. A security vulnerability exists in the My Preferences saving feature i...
