Security Updates for Microsoft Office Products (September 2019)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability...

CentOS Update for libvirt CESA-2019:1264 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libvirt security update

CentOS Errata and Security Advisory CESA-2019:1264 An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2018-1264

Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report. A remote attacker who has gained access to the Log Cache VM can read this secret, gaining all privileges held by the Log Cache UAA client. In the worst case, if this client is ...

CVE-2018-1264

The CVE concerns Cloud Foundry Log Cache prior to version 1.1.1, where the UAA client secret is logged on startup as part of the envstruct report. This exposes the secret to an attacker with access to the Log Cache VM, potentially granting all privileges of the Log Cache UAA client and, in worst ...

CVE-2018-1264: Log Cache logs UAA client secret on startup | Cloud Foundry

Severity Critical Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using log-cache-release versions prior to 1.1.1 Description Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report. A remote...

Security Bulletin: Improper Authentication vulnerability affects IBM Security Guardium (CVE-2017-1264)

Summary IBM Security Guardium does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-1264 DESCRIPTION: IBM...

ppomppu.co.kr Open Redirect vulnerability

Vulnerable URL: http://www.ppomppu.co.kr/redirect.php?target=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1264 VIP websi...

CVE-2017-1264

IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739...

CVE-2017-1264

CVE-2017-1264 is an IBM Security Guardium vulnerability (Improper Authentication) described by IBM as affecting Guardium 9.0, 9.1, 9.5 and 10.0, 10.0.1, 10.1, 10.1.2. The root cause is insufficient verification of a user’s identity, which can allow exposure of resources or functionality to uninte...

Oracle Linux 7 : kdelibs (ELSA-2017-1264)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1264 advisory. 6:4.14.8-6 - KAuth: verify that whoever is calling us is actually who he says he is CVE-2017-8422 Resolves: CVE-2017-8422 Tenable has extracted the preceding...

Virtuozzo Linux Errata and Security Advisory 2017:1264 Important

Upstream security update. Follow RHSA-2017-1264 for details...

CVE-2016-1264

Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before...

CVE-2016-1264

The CVE-2016-1264 issue affects Juniper Networks Junos OS, where a race condition in the Op command (through the Op URL option) can allow remote authenticated users to gain elevated privileges. Affected versions span multiple releases across 12.1X, 12.3, 13.2, 13.3, 14.1, 14.2, and 15.x lines (e....

Oracle: Security Advisory (ELSA-2012-1264)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : Chromium (openSUSE-2015-390)

Chromium was updated to 43.0.2357.65 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-1251: Use-after-free in Speech boo931659 - CVE-2015-1252: Sandbox escape in Chrome boo931671 - CVE-2015-1253: Cross-origin bypass in DOM boo931670 - CVE-2015-1254:...

Google Chrome Multiple Vulnerabilities - 02 - (May 2015) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

CVE-2015-1264

Cross-site scripting XSS vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature...