Lucene search
+L

2867 matches found

Qualys Blog
Qualys Blog
added 2020/10/13 6:52 p.m.219 views

October 2020 Patch Tuesday – 87 Vulnerabilities, 11 Critical, SharePoint, TCP/IP Stack, Graphics, Adobe Vulns

This month’s Microsoft Patch Tuesday addresses 87 vulnerabilities with 11 of them labeled as Critical. The 11 Critical vulnerabilities cover TCP/IP Stack, SharePoint, Windows Camera Codec Pack, Graphics and several other workstation vulnerabilities. Adobe issued patches today for Adobe Flash...

6.8CVSS2.2AI score0.70894EPSS
SaveExploits18
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/10/08 5:12 a.m.34 views

Cyber Security Month. What can you do?

October is Cyber Security Month, when organisations like the CISA, the ECSM, and many more promote initiatives to help raise security awareness. Around the world companies are dedicating time to improve staff security awareness, and its a really busy time for us. You may be thinking you’d like to...

7.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/07 9:22 p.m.16 views

Security Bulletin: Steps to update Dataquant Workstation and DataQuant WebSphere plugins.

Summary Query is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the HTML function. A remote attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site. An attacker could use...

7.1AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/07 9:18 p.m.43 views

Security Bulletin: Steps to update DataQuant Workstation and DataQuant WebSphere plugins.

Summary Query is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the load method. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context...

6.1CVSS0.3AI score0.06273EPSS
SaveExploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/07 9:15 p.m.53 views

Security Bulletin: Steps to update DataQuant Wrokstation ans DataQuant WebSphere plugins.

Summary Query is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the HTML function. A remote attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site. An attacker could use...

6.9CVSS0.3AI score0.99019EPSS
SaveExploits11Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/09/24 12:0 a.m.32 views

VMware Workstation 15.x < 15.5.7 Multiple Vulnerabilities (VMSA-2020-0020)

The version of VMware Workstation installed on the remote host is 15.x. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A malicious actor with norm...

6.5CVSS6AI score0.00324EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.13 views

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

4.3CVSS6.6AI score0.00324EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.9 views

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a attacker to trigger a service failure.

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...

4.3CVSS6.6AI score0.00289EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.9 views

The vulnerability of the Cortado ThinPrint parser component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.

The vulnerability of the Cortado ThinPrint parser on the EMF platform in VMware Workstation and Horizon Client for Windows involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

5.5CVSS6.8AI score0.00301EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.7 views

The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.

The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a...

5.5CVSS6.7AI score0.00301EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.6 views

The vulnerability of the Cortado ThinPrint parser for JPEG2000 from the VMware Workstation and Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.

The vulnerability of the Cortado ThinPrint parser for JPEG2000 on the VMware Workstation and Horizon Client for Windows hypervisor platform is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...

5.5CVSS6.8AI score0.00301EPSS
SaveExploits0References3Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/21 8:31 p.m.31 views

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability

Summary Steps to update Java for QMF Workstation & QMF Vision Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and ...

8.3CVSS0.6AI score0.0435EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/21 8:24 p.m.25 views

Security Bulletin: CVE-2020-2590 (deferred from Oracle Jan 2020 CPU)

Summary Steps to update Java for QMF Workstation & QMF Vision Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact,...

4.3CVSS0.4AI score0.03085EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/21 8:18 p.m.34 views

Security Bulletin: CVE-2020-2601 (deferred from Oracle Jan 2020 CPU)

Summary Steps to update Java for QMF Workstation & QMF Vision Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Security component could allow an unauthenticated attacker to obtain sensitive information...

6.8CVSS0.3AI score0.04196EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2020/09/16 5:15 p.m.7 views

CVE-2020-3989

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial...

3.3CVSS6AI score0.00289EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/16 5:15 p.m.5 views

CVE-2020-3988

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component JPEG2000 parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service...

6.1CVSS6.5AI score0.00301EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/16 5:15 p.m.8 views

CVE-2020-3990

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from...

6.5CVSS5.7AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/16 5:15 p.m.34 views

CVE-2020-3988

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component JPEG2000 parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service...

6.1CVSS0.00301EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/16 5:15 p.m.38 views

CVE-2020-3990

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from...

6.5CVSS0.00324EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/16 5:15 p.m.32 views

CVE-2020-3987

VMware Workstation 15.x and Horizon Client for Windows 5.x before 5.4.4 contain an out-of-bounds read vulnerability in Cortado ThinPrint component EMR STRETCHDIBITS parser. A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial...

6.1CVSS0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder