CVE-2018-0690

An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...

CVE-2018-0690

CVE-2018-0690 affects Sony Music Center for PC prior to 1.0.02, where the software update process does not validate updates securely. This enables a man-in-the-middle attacker to tamper with an update file and inject executable files during the update, potentially leading to code execution on the...

PT-2018-9016

Name of the Vulnerable Software and Affected Versions Music Center for PC versions 1.0.02 and earlier Description The issue is related to an unvalidated software update vulnerability. This could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...

CVE-2018-0690: Undefined Security Weakness

An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...

Siemens Patches Firewall Flaw That Put Operations at Risk

Siemens AG on Tuesday issued a slew of fixes addressing eight vulnerabilities spanning its industrial product lines. The most serious of the patched flaws include a cross-site scripting vulnerability in Siemens’ SCALANCE firewall product. The flaw could allow an attacker to gain unauthorized acce...

Multiple directory traversal vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple directory traversal vulnerabilities below. Directory traversal vulnerability due to a flaw in processing parameter of the HTTP request CWE-22 - CVE-2018-0703 Directory traversal vulnerability due to a flaw in processing parameter...

JVN#83739174: Cybozu Mailwise vulnerable to directory traversal

Cybozu Mailwise provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing parameter of the HTTP request. Impact A remote attacker may delete arbitrary files on the server. Solution Update the Software Update to the latest version according to the...

Security Advisory - Anonymous TLS Cipher Suite Supported Vulnerability in Huawei eSpace Product

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploite...

MGASA-2018-0441 Updated audiofile packages fix security vulnerabilities

A NULL pointer dereference in modules/ModuleState.cpp:ModuleState::setup allows for denial of service via crafted file CVE-2018-13440. A Heap-based buffer overflow was found in Expand3To4Module::run when running sfconvert CVE-2018-17095...

MGASA-2018-0444 Updated libtiff packages fix security vulnerability

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c. CVE-2018-18661...

Cisco Small Business Switches Privileged Access Vulnerability

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account...

PT-2018-14773 · Poppler +4 · Poppler +4

Name of the Vulnerable Software and Affected Versions: Poppler version 0.71.0 Description: The issue is related to an out-of-bounds read in the EmbFile::save2 function in FileSpec.cc. This can lead to a denial of service. The problem is demonstrated by the utils/pdfdetach.cc utility not validatin...

Schneider Electric Software Update DLL Hijacking Vulnerability

Schneider Electric Software Update SESU is a Schneider software update tool from Schneider Electric, France. Schneider Electric Software Update suffers from a DLL hijacking vulnerability that can be exploited by an attacker to execute arbitrary code by placing a specially crafted DLL file on the...

CVE-2018-7799

A DLL hijacking vulnerability exists in Schneider Electric Software Update SESU, all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file...

Spoofing

A DLL hijacking vulnerability exists in Schneider Electric Software Update SESU, all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file...

CVE-2018-7799

A DLL hijacking vulnerability exists in Schneider Electric Software Update SESU, all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file...

CVE-2018-7799

CVE-2018-7799 corresponds to a DLL hijacking vulnerability in Schneider Electric Software Update (SESU) prior to v2.2.0. The issue is classified as CWE-427 Uncontrolled Search Path Element and can allow an attacker with local access to place a crafted DLL and execute arbitrary code on the target ...

CVE-2018-7799

A DLL hijacking vulnerability exists in Schneider Electric Software Update SESU, all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file...

PT-2018-18285

Name of the Vulnerable Software and Affected Versions: Schneider Electric Software Update SESU versions prior to V2.2.0 Description: A DLL hijacking issue exists, which could allow an attacker to execute arbitrary code on the targeted system when a specific DLL file is placed. Recommendations: Fo...

CVE-2018-7799: Uncontrolled Search Path Element

A DLL hijacking vulnerability exists in Schneider Electric Software Update SESU, all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file...