July Patch Tuesday: 19 Critical Vulnerabilities from Microsoft, plus Critical Adobe Patches

Today Microsoft released patches covering 54 vulnerabilities as part of July’s Patch Tuesday update, with 26 of them affecting Windows. Patches covering 19 of these vulnerabilities are labeled as Critical, all of which can result in Remote Code execution. According to Microsoft, none of these...

July 11, 2017—KB4025331 (Monthly Rollup)

None None...

Security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 11, 2017 Summary An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully forward an authentication request to a Windows LDAP...

July 11, 2017—KB4025341 (Monthly Rollup)

None None...

July 11, 2017—KB4025342 (OS Build 15063.483)

None None...

July 11, 2017—KB4025338 (OS Build 10240.17488)

None None...

July 11, 2017—KB4025343 (Security-only update)

None None...

CVE-2016-8563

Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service ALM service outage via crafted packets to TCP port 4410...

CVE-2016-8563

CVE-2016-8563 affects Siemens Automation License Manager (ALM) prior to version 5.3 SP3 Update 1 . A remote attacker can trigger a denial of service by sending specially crafted packets to TCP port 4410 , causing the ALM service to outage (requires manual restart). The CVSS context in the provide...

Siemens Automation License Manager Vulnerabilities

OVERVIEW Siemens has identified vulnerabilities in Siemen’s Automation License Manager ALM. These vulnerabilities were reported directly to Siemens by Sergey Temnikov and Vladimir Dashchenko from Critical Infrastructure Defence Team, Kaspersky Lab. Siemens has produced a new version to mitigate...

CVE-2015-8563

CVE-2015-8563 is a CSRF vulnerability in Joomla!'s com_templates component affecting Joomla! 3.2.0–3.3.x and 3.4.x prior to 3.4.6, allowing remote attackers to hijack authentication via unknown vectors. The connected documents confirm the affected versions and component, with guidance on CSRF har...

Joomla! < 3.4.6 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.4.6. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper sanitization of session values. An unauthenticated,...