November 2016 Preview of Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, 4.6 on Windows Vista SP2 and Windows Server 2008 SP2 (KB3195382): November 15, 2016

November 2016 Preview of Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, 4.6 on Windows Vista SP2 and Windows Server 2008 SP2 KB3195382: November 15, 2016 This update is superseded by the December 13, 2016, Quality Rollup 3210142. Note There is a known issue in this update. For more...

November 2016 Preview of Quality Rollup for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1 on Windows Server 2012 (KB3195383)

November 2016 Preview of Quality Rollup for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1 on Windows Server 2012 KB3195383 This update is superseded by the December 13, 2016, Quality Rollup 3205403. Note There is a known issue in this update. For more information, see KB 3214106.The November 2016...

MS15-101: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: September 8, 2015

MS15-101: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could allow...

MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015

MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The most seve...

November 2016 Preview of Quality Rollup for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB3196686)

November 2016 Preview of Quality Rollup for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1 on Windows 7 SP1 and Windows Server 2008 R2 SP1 KB3196686 This update is superseded by the December 13, 2016, Quality Rollup 3205402. Note There is a known issue in this update. For more information, see KB...

Samba User Emulation Vulnerability

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A security...

CVE-2016-7888

Adobe Digital Editions

Microsoft .NET Framework Information Disclosure Vulnerability (3192884)

This host is missing an important security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Digital Editions Memory Misreference Vulnerability

Adobe Digital Editions is software for reading and managing eBooks and other digital publications, supporting industry-standard eBook formats. A memory misreference vulnerability exists in the implementation of Adobe Digital Editions versions prior to 4.5.2 that could allow an attacker to execute...

CVE-2016-4259

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262...

CVE-2016-4258

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262...

Memory corruption

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262...

x86: Mishandling of instruction pointer truncation during emulation

ISSUE DESCRIPTION When emulating HVM instructions, Xen uses a small i-cache for fetches from guest memory. The code that handles cache misses does not check if the address from which it fetched lies within the cache before blindly writing to it. As such it is possible for the guest to overwrite...

WordPress 3.6-4.5.2 Authenticated Revision History Information Disclosure

No description provided by source...

Fedora 23 : wordpress (2016-cf91320535)

WordPress 4.5.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. See the Release announcement ---- Version 4.5.1 of WordPress is available and fixes 12 bugs. See Release announcement Note that Tenable Network...

Fedora 24 : wordpress (2016-d9bd0c4830)

WordPress 4.5.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. See the Release announcement --- Packaging changes - provide nginx configuration - drop mandatory dependency on httpd only suggested and modphp...

Fedora 22 : wordpress (2016-e97a850183)

WordPress 4.5.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. See the Release announcement ---- Version 4.5.1 of WordPress is available and fixes 12 bugs. See Release announcement Note that Tenable Network...

WordPress Redirection Bypass Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A redirection bypass vulnerability exists in the WordPress 4.5.2 and earlier versions of the customizer, which can be exploited by an attacker to bypass redirection...

WordPress <= 4.5.2 - BYPASS #2

This vulnerability allows an attacker to bypass intended password-change restrictions by leveraging knowledge of a cookie. Related records: http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass-2...

WordPress <= 4.5.2 - XSS #1

WordPress version 4.5.2 is prone to a cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php. It allows an attacker to inject arbitrary web script or HTML via a crafted attachment name. Related:...