Microsoft Releases April 2017 Security Updates

Microsoft has released 61 updates to address vulnerabilities in Microsoft software. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of a system. This Security Update addresses a Microsoft Office vulnerability that is actively being exploited to spread...

April, 2017 Security Monthly Quality Rollup for Windows Embedded 8 Standard for x64-based Systems (KB4015551)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

April, 2017 Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1 on Windows Embedded 8 Standard for x64 (KB4014986)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

April 2017 security update release

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide. MSRC team...

KB4017094: Security Update for the libjpeg Information Disclosure Vulnerability for Microsoft Silverlight 5 (April 2017)

The version of Silverlight 5 installed on the remote Windows host is missing security update KB4017094. It is, therefore, affected by an information disclosure vulnerability in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remo...

KB4015221: Windows 10 Version 1507 April 2017 Cumulative Update

The remote Windows 10 Version 1507 host is missing security update KB4015221. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the open-source libjpeg image processing library due to improper handling of objects in memory. An...

KB4015217: Windows 10 1607 April 2017 Cumulative Update

The remote Windows 10 host is missing security update KB4015217. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remote...

guestzone.nl Open Redirect vulnerability

Vulnerable URL: http://www.guestzone.nl/gfx/banners/banner20151014151256.swf?clickTag=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 222755 VIP...

chaikovskie.ru XSS vulnerability

Vulnerable URL: http://www.chaikovskie.ru/tmp/a/92e0517520c959ed9627c32bf44e355e.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 418250 VI...

ancestryshop.co.uk XSS vulnerability

Vulnerable URL: https://www.ancestryshop.co.uk/banners/flash/gpack3.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 918129 VIP website...

tahko.com XSS vulnerability

Vulnerable URL: https://www.tahko.com/index.php?act=lomaasunto=M03601=1=3=kauppa"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 599457 VIP website status:| No Check tahko.com...

CVE-2017-2473

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41792...

CVE-2017-2442

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41800...

CVE-2017-2445

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41802...

CVE-2017-2443

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41790...

CVE-2017-2471

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41813...

CVE-2017-0007

creationtimestamp| type| source ---|---|--- 2017-04-03 21:24:52+00:00| published-proof-of-concept| https://t.me/canyoupwnme/1090 2017-04-04 22:48:16+00:00| published-proof-of-concept| https://t.me/canyoupwnme/1117 2026-07-29 12:01:22+00:00| seen|...

gooding.de XSS vulnerability

Vulnerable URL: https://www.gooding.de/produktvergleich?q=a%3E%27%3E%22%3Etr%3Ci%3Ep%3Cimg+src%3Dy%20onerror%3Dprompt%2Fopenbugbounty%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

baike.com XSS vulnerability

Vulnerable URL: http://www.baike.com/docClaimApply.do?action=showClaimDocApply=adya4cz%22onfocus%3d%22alert%28/OPENBUGBOUNTY/%29%22autofocus%3d%22rbo8n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Fixed in Apache Tomcat 9.0.0.M18

Low: Information Disclosure CVE-2017-5648 While investigating bug 60718, it was noticed that some calls to application listeners did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to...