CVE-2008-3493

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service application crash via a crafted frame buffer update packet...

Cisco AnyConnect Secure Mobility Client Search Path Handling Vulnerability

The Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients. The client enables remote users to securely connect to Cisco ASA 5500 devices over SSL VPN. The 'CMainThread::launchDownloader' function in the vpndownloader.exe file of the Cisco AnyConnect Secure Mobility Clien...

Microsoft Internet Explorer 缓冲区溢出漏洞 ms15-093

当 Internet Explorer 不正确地访问内存中的对象时，存在远程执行代码漏洞。此漏洞可能以一种攻击者可以在当前用户的上下文中执行任意代码的方式损坏内存。攻击者可能拥有一个旨在通过 Internet Explorer 利用此漏洞的经特殊设计的网站，然后诱使用户查看该网站，则该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与当前用户相同的用户权限。如果当前用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。频繁使用 Internet Explorer...

[security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Discl

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04751893 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04751893 Version: 1 HPSBGN03386 rev.1 - HP Central View Fraud Risk Management,...

SAP Afaria 'XeService.exe' Insecure File Permissions Vulnerability

SAP Afaria is a mobile device management and security solution. A security vulnerability exists in the Windows client of SAP Afaria version 7.0.6398.0, which can be exploited by a local attacker to gain privileges with the help of the Trojan horse XeService.exe file...

CVE-2015-3449

The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions Everyone: read and Everyone: write for the install folder, which allows local users to gain privileges via a Trojan horse XeService.exe file...

Code injection

The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions Everyone: read and Everyone: write for the install folder, which allows local users to gain privileges via a Trojan horse XeService.exe file...

CVE-2015-3449

The CVE-2015-3449 entry concerns the Windows client of SAP Afaria 7.0.6398.0. A root cause is insecure/permissive file permissions on the install folder (Everyone: read and Everyone: write), which enables a local attacker to gain privileges via a Trojan horse XeService.exe file. This describes a ...

Soreco AG Xpert.Line 3.0 Authentication Bypass

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Xpert.Line Vendor: Soreco AG 1 CVE ID: CVE-2015-3442 Subject: Authentication Bypass Risk: Critical Effect: Remotely exploitable Author: Alessandro Zala [email protected] Andreas Hunkeler...

IT-Grundschutz M4.146: Sicherer Betrieb von Windows Client-Betriebssystemen

IT-Grundschutz M4.146: Sicherer Betrieb von Windows Client-Betriebssystemen. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4146.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.146 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen.

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen. Stand: 15. Ergänzungslieferung 15. EL. OpenVAS Vulnerability Test $Id: GSHBM4244.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 15. EL, Maßnahme 4.244 Authors: Thomas Rotter Copyright: Copyright c 2015...

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4249.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.249 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...

IT-Grundschutz M4.146: Sicherer Betrieb von Windows Client-Betriebssystemen

IT-Grundschutz M4.146: Sicherer Betrieb von Windows Client-Betriebssystemen. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen.

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen. Stand: 15. Ergnzungslieferung 15. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

iPass Open Mobile Windows Client Remote Code Execution Vulnerability

iPass Open Mobile is a quick and easy way for you to use your device to connect to over a million enabled WIFIs around the world. A security vulnerability exists in the iPass Open Mobile client that allows attackers to register arbitrary DLLs via UNC shared pathnames by sending specially crafted...

RealVNC Windows Client 4.1.2 - Remote DoS Crash PoC

No description provided by source. !/usr/bin/php ?php RealVNC Windows Client DoS AppName: vncviewer.exe AppVer: 4.1.2.0 ModName: vncviewer.exe ModVer: 4.1.2.0 Offset: 000229e0 function vncear $port = 5900; $ser = socketcreateAFINET, SOCKSTREAM, SOLTCP; socketsetoption$ser,SOLSOCKET,SOREUSEADDR,1;...

Attachmate Reflection Secure IT Windows Client Information Disclosure (Heartbleed)

The Attachmate Reflection Secure IT Windows Client install on the remote host contains a component, Reflection FTP Client, which is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions th...

Description of the security update for Juniper Networks Windows In-Box Junos Pulse client for systems that have update 2919355 installed: May 5, 2014

None None...

CVE-2014-0348

The Artiva Agency Single Sign-On SSO implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the correspondin...