Security Bulletin: IBM QRadar SIEM is vulnerable to Server-Side Request Forgery (SSRF) (CVE-2020-4294)

Summary IBM QRadar SIEM is vulnerable to Server-Side Request Forgery SSRF Vulnerability Details CVEID: CVE-2020-4294 DESCRIPTION: IBM QRadar SIEM is vulnerable to Server Side Request Forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially...

Security Bulletin: IBM QRadar SIEM is vulnerable to instantiation of arbitrary objects (CVE-2020-4272)

Summary IBM QRadar SIEM is vulnerable to vulnerable to instantiation of arbitrary objects based on user-supplied input. Vulnerability Details CVEID: CVE-2020-4272 DESCRIPTION: IBM QRadar could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted...

Security Bulletin: IBM QRadar SIEM is vulnerable to cross site scripting (XSS) (CVE-2020-4268)

Summary IBM QRadar SIEM is vulnerable to cross site scripting Vulnerability Details CVEID: CVE-2020-4268 DESCRIPTION: IBM QRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

Threat Source newsletter for April 9, 2020

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Nearly all devices have some sort of fingerprint scanner now, used to log users in. But these scanners prevent their own unique attack...

franciscoponce.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142017 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting franciscoponce.com websit...

chemtan.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141771 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting chemtan.com website and i...

A QUICk Introduction to HTTP/3

HTTP/3 is the newest iteration of the HTTP protocol that improves web security and performance...

MS15-022: Description of the security update for the 2007 Microsoft Office system: March 10, 2015

Describes a security update that resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an...

MS15-022: Description of the security update for Microsoft Excel 2007 Service Pack 3: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or previ...

neomax.ro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138472 Security Researcher MrRhino Helped patch 52 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting neomax.ro website and its...

nekkyo-singapore.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137943 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting nekkyo-singapore.com...

Description of PowerPoint Viewer 2007 SP3

Describes the improvements that Office PowerPoint Viewer 2007 SP3 provides and the issues that it fixes.IntroductionMicrosoft Office PowerPoint Viewer 2007 Service Pack 3 SP3 provides the latest updates to Office PowerPoint Viewer 2007. These updates include two main categories of fixes: Previous...

Update Rollup 3 for System Center 2012 R2 Operations Manager

Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...

firefox security update

68.7.0-2.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 68.7.0-2 - Update to 68.7.0 build3 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Hora...

Update Rollup 3 for Windows MultiPoint Server 2012

Update Rollup 3 for Windows MultiPoint Server 2012 Summary This article describes Update Rollup 3 for Windows MultiPoint Server 2012. This update rollup resolves issues that were found in Windows MultiPoint Server 2012 after the software was released. This update rollup is highly recommended for...

Apple Security Update: watchOS 6.2.1

Apple recommends to install security update watchOS 6.2.1 on devices Apple Watch Series 1 and 2 Apple Watch Series 3 and later...

postshop.autoteile-post.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135238 Security Researcher gdattacker Helped patch 160 vulnerabilities Received 3 Coordinated Disclosure badges Received 18 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting postshop.autoteile-post....

[SECURITY] Fedora 32 Update: swt-chart-0.12.0-3.fc32

SWTChart is a light-weight charting component for SWT...

Important Photon OS Security Update - PHSA-2020-0224

Updates of 'python3' packages of Photon OS have been released...

CVE-2020-11499

FACT 3 from Firmware Analysis and Comparison Tool shows a Stored XSS vulnerability when updating analysis details via a localhost web request, caused by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py. This is corroborated by multiple CVE references (NVD, Re...