1195 matches found
Description of the security update for the font library vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: August 14, 2018
Description of the security update for the font library vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: August 14, 2018 Summary A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted...
Description of the security update for Word Viewer: August 14, 2018
None None...
Fresh Approach to WiFi Cracking Uses Packet-Sniffing
Legacy WiFi just became a little less safe, according to Jens Steube, the developer of the password-cracking tool known as Hashcat. He has found a faster, easier way to crack some WPA/WPA2-protected WiFi networks. Hackers have compromised the WPA/WPA2 encryption protocols in the past, but it’s an...
Description of the security update for the Windows denial of service vulnerability in Windows Server 2008: July 10, 2018
Description of the security update for the Windows denial of service vulnerability in Windows Server 2008: July 10, 2018 Summary A denial of service vulnerability exists when Windows improperly handles objects in memory. To learn more about the vulnerabilities, go to the following Common...
Description of the security update for the security feature bypass vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: July 10, 2018
None None...
Description of the security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 10, 2018
Description of the security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 10, 2018 Summary An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape. To learn more about the vulnerability, go to CVE-2018-8314. H...
Security Bulletin: IBM QRadar SIEM uses broken or risky cryptographic algorithms (CVE-2016-2879)
Summary The software uses an outdated insecure cipher or it is using a proprietary crypto standard which is likely to be vulnerable. Outdated/broken algorithms are MD4, MD5, SHA1, DES, ECB, RC4, Export ciphers, SSLv2, SSLv3, DH using keys less than 1024 Vulnerability Details CVEID: CVE-2016-2879...
Microsoft Windows: Network security: Encryption types allowed for Kerberos
This policy setting allows you to set the encryption types that Kerberos is allowed to use. If not selected, the encryption type will not be allowed. This setting may affect compatibility with client computers or services and applications. Multiple selections are permitted. C Microsoft Corporatio...
Description of the security update for the remote code execution vulnerability in Windows Server 2008: June 12, 2018
Description of the security update for the remote code execution vulnerability in Windows Server 2008: June 12, 2018 Summary A remote code execution vulnerability exists in the way that Windows handles objects in memory. To learn more about the vulnerability, go to CVE-2018-8136. More Information...
Description of the security update for the Microsoft COM for Windows remote code execution vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
None None...
Description of the security update for the vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
Description of the security update for the vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018 Summary An elevation of privilege vulnerability and an information disclosure vulnerability exist in Windows when the Win32k component...
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018 Summary An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. A remote code...
ntp security, bug fix, and enhancement update
4.2.6p5-28.0.1 - Bump release to avoid ULN conflict with Oracle modified errata. 4.2.6p5-28 - fix buffer overflow in datum refclock driver CVE-2017-6462 - fix crash with invalid unpeer command CVE-2017-6463 - fix potential crash with invalid server command CVE-2017-6464 - add Spectracom TSYNC...
MalScan - A Simple PE File Heuristics Scanners
MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things Supported...
Description of the security update for the Microsoft graphics component denial of service vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018
None None...
Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018
Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018 Summary A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affect...
Internet Explorer help
None None...
Sophos Endpoint Protection Control Panel 10.7 - Weak Password Encryption
Sophos Endpoint Protection Control Panel 10.7 - Weak Password Encryption + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-CONTROL-PANEL-v10.7-INSECURE-CRYPTO-CVE-2018-9233.txt + ISR: Apparition...
Sophos Endpoint Protection 10.7 Insecure Cryptography Vulnerability
Sophos Endpoint Protection version 10.7 control panel authentication uses a weak unsalted unicoded cryptographic hash SHA1 function. Not using a salt allows attackers that gain access to hash ability to conduct faster cracking attacks using pre-computed dictionaries, e.g. rainbow tables. This can...