2066 matches found
Denial of service vulnerability in the mp110005.sys driver of Micropoint Smart Defense Software Personal Free Edition (CNVD-2018-20119)
Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...
MalwareFox AntiMalware v2.74.206.150 suffers from a denial of service vulnerability
MalwareFox AntiMalware is a suite of malware removal tools. The tool automatically detects and removes malware, cleans browsers, repairs files corrupted by rootkits and protects against virus infections in real time. A denial of service vulnerability exists in the zam32.sys driver in MalwareFox...
Denial of service vulnerability in the mp110005.sys driver of Micropoint Intelligent Defense Software Personal Free Edition (CNVD-2018-20118)
Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...
Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235
Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware and more. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...
Denial of Service Vulnerability in Advanced SystemCare Ultimate v11.4.0.235
Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A denial of service vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate v11.4.0.235, which...
sqlite (>=0.19.7 <=0.21.1), sqlite3-sys (>=0.6.7 <=0.9.2) +3 more potentially affected by unknown CVE via temporary (=0.5.1)
temporary CARGO version =0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0022...
WAF Buster - Disrupt WAF By Abusing SSL/TLS Ciphers
Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end. Reference: https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html It works by...
DEBIAN-CVE-2018-6556
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...
Cisco AnyConnect Secure Mobility Client for Windows Desktop Input Validation Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows Desktop is a secure mobility client for the Windows platform from Cisco that provides secure access to networks and applications from any device. An input validation vulnerability exists in the vpnva-6.sys file and the vpnva64-6.sys file in Cisc...
file: Denial of service
Background file is a utility that guesses a file format by scanning binary data for patterns. Description File does not properly utilize the docorenote function in readelf.c in libmagic.a. Impact A remote attacker could send a specially crafted ELF file possibly resulting in a Denial of Service...
CVE-2018-0373
CVE-2018-0373 affects Cisco AnyConnect Secure Mobility Client for Windows Desktop, specifically vpnva-6.sys (32-bit) and vpnva64-6.sys (64-bit). A local, authenticated attacker can exploit improper validation of user-supplied data to cause a Denial of Service on the affected system. The vulnerabi...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise (CVE-2016-8934)
Summary There is a security vulnerability in WebSphere Application Server, IBM Business Process Manager, and IBM Tivoli System Automation Application Manager that is shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise. Additionally, the vulnerability affects Jazz™ for Service...
Security Bulletin: Open Source GNU glibc Vulnerabilities which is used by IBM OS Images for RedHat Linux in IBM PureApplication Systems (CVE-2017-1000366)
Summary There are vulnerabilities in the Open Source GNU glibc that is used by the OS Images for IBM PureApplication Software Suite, IBM Bluemix Local System and IBM PureApplication System/Software Vulnerability Details CVEID: CVE-2017-1000366 DESCRIPTION: Glibc could allow a local attacker to...
procps: Multiple vulnerabilities
Background A bunch of small useful utilities that give information about processes using the /proc filesystem. Description Multiple vulnerabilities have been discovered in procps. Please review the CVE identifiers referenced below for details. Impact A local attacker could execute arbitrary code,...
Shadow: security bypass
Background Shadow is a set of tools to deal with user accounts. Description A local attacker could possibly bypass security restrictions if an administrator used “group blacklisting” to restrict access to file system paths. Impact A local attacker could possibly bypass security restrictions...
SUSE-SU-2018:1007-1 Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-9238 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...
ncurses: Multiple vulnerabilities
Background Free software emulation of curses in System V. Description Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing the user to process untrusted terminfo or other data, could execute...
Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08677)
Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...
Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08676)
Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...