7157 matches found
Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-48256)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...
Microsoft Windows Work Folder Service Elevation of Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Work Folder Service,...
Security Update for Microsoft Office Web Apps Server 2013 (KB4484481) farm-deployment
A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
US firm accused of secretly installing location tracking SDK in mobile apps
By Zara Khan AUS government contractor 'Anomaly Six' has location tracking software hidden in more than 500 mobile apps. This is a post from HackRead.com Read the original post: US firm accused of secretly installing location tracking SDK in mobile apps...
Description of the security update for Office Web Apps Server 2013: August 11, 2020
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: August 11, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...
chromium-browser: Incorrect security UI in PWAs
Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the contents of the Omnibox URL bar via a crafted PWA...
PT-2020-3936 · Microsoft · Graphics +1
Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: The issue is related to the incorrect handling of objects in memory, which can allow an attacker to gain unauthorized access to protected information using a specially...
iproute2: Denial of service
Background iproute2 is a set of tools for managing Linux network routing and advanced features. Description iproute2 was found to contain a use-after-free in getnetnsidfromname in ip/ipnetns.c. Impact A remote attacker, able to feed iproute2 crafted data, may be able to cause a Denial of Service...
Zero Trust: From security option to business imperative overnight
Not long ago when I spoke with customers about Zero Trust, our conversations focused on discussing the principles, defining scope, or sharing our own IT organization’s journey. Zero Trust was something interesting to learn about, and most organizations were very much in the exploratory phase. As...
Dutch Hackers Found a Simple Way to Mess With Traffic Lights
By reverse engineering apps intended for cyclists, security researchers found they could cause delays in at least 10 cities from anywhere in the world...
20 Years of Edge Computing
How long will you wait for something? That depends on what you're waiting for, of course. But in your daily interactions, think about how many "things" you interact with where you expect the response to be instantaneous -- tapping on mobile apps; logging in and transacting with a retailer or a...
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...
The vulnerability of the Microsoft 365 Apps for Enterprise package lies in the use of an insecure search path, allowing a hacker to execute arbitrary code.
The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of an insecure search path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created document...
The vulnerability of Microsoft Office Online Server and Microsoft Office Web Apps Server stems from a lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.
The vulnerability of Microsoft Office Online Server and Microsoft Office Web Apps Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the text editor Microsoft Word are related to memory object processing errors, allowing an intruder to gain unauthorized access to protected information.
The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the word processing software Microsoft Word are related to errors in memory object handling. Exploiting thes...