Смотрите также связанные темы 29.08.2018 CVE-2012-4736 The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block access to exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.
03.09.2018 Kaspersky Lab granted new patent covering remote security deployment technology for smartphones and tablets Control over mobile devices is an essential element of corporate security, and it is best implemented centrally, so there is no need to install and set up security software on each individual smartphone or tablet PC. A new technology from Kaspersky Lab makes this possible by allowing for remote installation and set-up on mobile devices. Patent number 8,250,540 covering this technology has been granted to Kaspersky Lab by the US Patent Office.Both corporate devices and employees’ personal smartphones and tablets can be used to access sensitive business data. According to a study conducted by O...
07.06.2018 CVE-2010-1439 yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.
15.12.2018 Kerio Control 9.0 streamlines network security deployment for small and mid-sized businesses New release of network security solution introduces zero-touch provisioning, shared definitions and extends two-step verification to MyKerio.
03.01.2018 CVE-2015-4946 Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x ...
09.09.2018 Kerio WinRoute Firewall 6.5 Delivers Internet Link Load Balancing for High-Availability Advanced Network Security Solution Delivers Load Balancing for Increased Internet Speed and Faster Access to Mission-critical Applications
18.12.2018 Symantec Multiple Products SPBBCDrv Driver Local Denial of Service PoC Цель: Symantec SPBBCDrv Driver Воздействие: Отказ в обслуживании
24.12.2018 CVE-2008-5716 xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue exists because of erroneous set_permissions calls in the fix for CVE-2008-4405.
07.01.2018 CVE-2009-0069 Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local users to cause a denial of service (recursive mutex_enter and panic) via unspecified vectors.
13.01.2018 CVE-2007-1793 SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
|