849 matches found
CVE-2018-8238
Summary of CVE-2018-8238 (Skype for Business/Lync Security Feature Bypass) : The issue arises when Skype for Business or Lync fail to properly parse UNC path links shared via messages, enabling a security feature bypass. An attacker could exploit this by persuading a logged-in user to click a cra...
PT-2018-18505
Name of the Vulnerable Software and Affected Versions Skype for Business affected versions not specified Microsoft Lync affected versions not specified Description A security feature bypass issue exists due to improper parsing of UNC path links shared via messages. This issue affects Skype and...
CVE-2018-8238: Undefined Security Weakness
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync...
CVE-2018-0949: Undefined Security Weakness
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10...
CVE-2018-0949
CVE-2018-0949 is a security feature bypass affecting Microsoft Internet Explorer (IE9, IE10, IE11) caused by improper handling of UNC resource requests. Multiple sources (NVD and OpenVAS feeds) corroborate a vulnerability class described as an Internet Explorer Security Feature Bypass Vulnerabili...
Microsoft Windows Multiple Vulnerabilities (KB4338815)
This host is missing a critical security update according to Microsoft KB4338815 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Skype for Business and Lync Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages. An attacker who successfully exploited the vulnerability could execute arbitrary commands in the context of the logged-in user. The security feature bypass by...
PT-2018-9167
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11 Description: A security feature bypass issue exists due to Microsoft Internet Explorer's improper handling of requests involving UNC resources. This could allow an attacker to force the browse...
KB4338826: Windows 10 Version 1703 July 2018 Security Update
The remote Windows host is missing security update 4338826. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A remote code execution...
Tor: Potential IP revealing using UNC Path in Windows File Picker
Vulnerability description not provided...
How to Save CDF Monitor Logs On A UNC Network Share
Due to local disk space constraints or for Non-Persistent VDA's administrator may want to save the CDF Monitor logs on a UNC network share...
June 21, 2018âKB4284842 ( Preview of Monthly Rollup)
None None...
Microsoft Windows: Hardened UNC Paths
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhardeneduncpath.nasl 11098 2018-08-23 14:32:47Z emoss $ Check value for Hardened UNC Paths Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
Input validation
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable v...
UPDATE: OWASP Dependency-Check 3.1.0
PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.1.0! This release comes with...