Description of the cumulative update for Lync 2010: January 2012

Describes the bugs that are resolved in the January 2012 cumulative update package for Lync 2010.SummaryThis article describes the Microsoft Lync 2010 issues that are fixed in the cumulative update that is dated January 2012.This article describes the following items about the update package:The...

CVE-2012-5193

Bitweaver 2.8.1 and earlier versions are affected by multiple cross-site scripting (XSS) vulnerabilities (CVE-2012-5193). Attackers can inject arbitrary web script or HTML by manipulating path info or specific parameters: stats/index.php (path info, days), newsletters/edition.php, users/remind_pa...

CVE-2012-2237

Summary: CVE-2012-2237 affects Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2, enabling remote XSS via multiple vectors (1) javascript innerHTML in login form generation, (2) links, (3) resources URLs, and (4) the Display name in profiles. The underlying issue is insufficient sanitization/encod...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2012-1572

OpenStack Keystone is affected by CVE-2012-1572: extremely long passwords can exhaust Keystone’s stack space and crash the service. The connected sources confirm this behavior but do not provide a specific remediation or patched version in the supplied documents.

CVE-2012-1109

CVE-2012-1109 affects mwlib versions 0.13 through 0.13.4, which contain a denial-of-service vulnerability in the parser when handling #iferror magic functions. The vulnerability is documented across multiple sources (NVD, CVE lists, and related records) and is classified with a MEDIUM to HIGH imp...

Internet Explorer help

None None...

Microsoft Windows Win32k CVE-2019-1434 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...

Microsoft Windows Graphics Component CVE-2019-1433 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

Microsoft Windows Netlogon CVE-2019-1424 Security Bypass Vulnerability

Description Microsoft Windows Netlogon is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologie...

EulerOS 2.0 SP5 : elinks (EulerOS-SA-2019-2142)

According to the version of the elinks package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.CVE-2012-6709 Note that Tenable Network Security has extracted the...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: October 8, 2019

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: October 8, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include the following: Improves the Secure Boot revocation list DBX update...

Microsoft Windows JET Database Engine CVE-2019-1406 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

ffua.skridsko.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1011370 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting ffua.skridsko.net websit...

CVE-2012-0051

Technical details about CVE-2012-0051 are not publicly provided in the supplied connected documents. Monitor for updates from vendors and security advisories.

CVE-2012-0049

OpenTTD is affected by CVE-2012-0049: before version 1.1.5, servers can be subjected to a slow-read denial-of-service that prevents clients from joining. The description specifies the vulnerability as a network-based DoS with a slow read attack; no remediation/version information is provided in t...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: November 12, 2019

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your...

Servicing stack update for Windows Server 2012: November 12, 2019

Servicing stack update for Windows Server 2012: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system before...

Security Bulletin: A vulnerability in Apache Ant affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Ant was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2012-2098 DESCRIPTION: Apache Commons Compress and Apache Ant are vulnerable to a denial of service, caused by an error when using bzip2 compression to compress files. By...

CVE-2012-2979

CVE-2012-2979 affects FreeBSD NSD before 3.2.13. A remote attacker can cause a crash of a NSD child server process (SIGSEGV), leading to denial of service in the NSD server. The vulnerability is exploitable over the network with no authentication and no user interaction required, with impact on a...