Description of Office Excel Viewer 2007 SP3

Describes the improvements that Office Excel Viewer 2007 SP3 provides and the issues that it fixes.IntroductionMicrosoft Office Excel Viewer 2007 Service Pack 3 SP3 provides the latest updates to Office Excel Viewer 2007. These updates include two main categories of fixes: Previously unreleased...

gyges.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145820 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting gyges.org website and its users. Following coordinat...

Security Bulletin: IBM QRadar SIEM is vulnerable to improper input validation (CVE-2020-4151)

Summary IBM QRadar SIEM is vulnerable to improper input validation, allowing an authenticated attacker to perform unauthorized actions Vulnerability Details CVEID: CVE-2020-4151 DESCRIPTION: IBM QRadar could allow an authenticated attacker to perform unauthorized actions due to improper input...

CVE-2020-9280

In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is...

CVE-2020-9280

In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is...

Should cloud service providers be concerned with FIPS 140-3?

If youve dealt with FedRAMP, you may already know that FIPS 140-2 is the standard for cryptographic modules published by the National Institute of Standards and Technology NIST. All cloud service providers CSPs who wish to be FedRAMP compliant must use only crypto modules that have been validated...

hillmanresearch.upmc.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1143083 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting hillmanresearch.upmc.edu...

Security Bulletin: IBM QRadar SIEM is vulnerable to Server-Side Request Forgery (SSRF) (CVE-2020-4294)

Summary IBM QRadar SIEM is vulnerable to Server-Side Request Forgery SSRF Vulnerability Details CVEID: CVE-2020-4294 DESCRIPTION: IBM QRadar SIEM is vulnerable to Server Side Request Forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially...

Security Bulletin: IBM QRadar SIEM is vulnerable to instantiation of arbitrary objects (CVE-2020-4272)

Summary IBM QRadar SIEM is vulnerable to vulnerable to instantiation of arbitrary objects based on user-supplied input. Vulnerability Details CVEID: CVE-2020-4272 DESCRIPTION: IBM QRadar could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted...

Security Bulletin: IBM QRadar SIEM is vulnerable to cross site scripting (XSS) (CVE-2020-4268)

Summary IBM QRadar SIEM is vulnerable to cross site scripting Vulnerability Details CVEID: CVE-2020-4268 DESCRIPTION: IBM QRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

Threat Source newsletter for April 9, 2020

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Nearly all devices have some sort of fingerprint scanner now, used to log users in. But these scanners prevent their own unique attack...

franciscoponce.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142017 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting franciscoponce.com websit...

chemtan.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141771 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting chemtan.com website and i...

A QUICk Introduction to HTTP/3

HTTP/3 is the newest iteration of the HTTP protocol that improves web security and performance...

MS15-022: Description of the security update for the 2007 Microsoft Office system: March 10, 2015

Describes a security update that resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an...

MS15-022: Description of the security update for Microsoft Excel 2007 Service Pack 3: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or previ...

neomax.ro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138472 Security Researcher MrRhino Helped patch 52 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting neomax.ro website and its...

nekkyo-singapore.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137943 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting nekkyo-singapore.com...

Description of PowerPoint Viewer 2007 SP3

Describes the improvements that Office PowerPoint Viewer 2007 SP3 provides and the issues that it fixes.IntroductionMicrosoft Office PowerPoint Viewer 2007 Service Pack 3 SP3 provides the latest updates to Office PowerPoint Viewer 2007. These updates include two main categories of fixes: Previous...

Update Rollup 3 for System Center 2012 R2 Operations Manager

Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...