Collaborate Disseminate
SHDesigns’ Resident Download Manager(as well as the Ethernet Download Manager)does not authenticate firmware downloads before executing code and deploying them to devices. Continue reading VU#167623: SHDesigns Resident Download Manager does not authenticate firmware downloads
The Cisco WebEx extensions for Chrome,Firefox,and Internet Explorer allow a remote,unauthenticated attacker to execute arbitrary code on a vulnerable Windows system. Continue reading VU#909240: Cisco WebEx web browser extension allows arbitrary code execution
CodeLathe FileCloud,version 13.0.0.32841 and earlier,is vulnerable to cross-site request forgery(CSRF). Continue reading VU#865216: CodeLathe FileCloud is vulnerable to cross-site request forgery
On the iOS platform,the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections,which may allow an attacker to perform a man-in-the-middle(MITM)attack. Continue reading VU#767208: ThreatMetrix SDK for iOS fails to validate SSL certificates
ShoreTel Mobility Client for iOS and Android,version 9.1.3.109 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#475907: ShoreTel Mobility Client mobile application does not verify SSL certificates
ShoreTel Mobility Client for iOS,version 9.1.2.101 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#475907: Shoretel Mobility Client iOS application does not verify SSL certificates
McAfee VirusScan Enterprise for Windows scriptproxy COM object contains a memory corruption vulnerability. Continue reading VU#535111: McAfee VirusScan Enterprise for Windows scriptproxy COM object memory corruption vulnerability
EpubCheck 4.0.1 is vulnerable to external XML entity processing attacks. Continue reading VU#779243: EpubCheck 4.0.1 contains a XML external entity processing vulnerability
McAfee VirusScan for Linux contains multiple vulnerabilities. Continue reading VU#245327: McAfee VirusScan for Linux contains multiple vulnerabilities
Netgear R6250,R6400,R6700,R6900,R7000,R7100LG,R7300DST,R7900,R8000,D6220,and D6400 routers and possibly other models are vulnerable to arbitrary command injection. Continue reading VU#582384: Multiple Netgear routers are vulnerable to arbitrary command injection