CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

CVE-2020-7489

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software versions in security notification. The result of this vulnerability, DLL substitution, coul...

CVE-2020-7489

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software versions in security notification. The result of this vulnerability, DLL substitution, coul...

CVE-2020-7490: Untrusted Search Path

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

PT-2020-19607

Name of the Vulnerable Software and Affected Versions EcoStruxure Machine Expert – Basic or SoMachine Basic programming software affected versions not specified Description A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' issue exists, whi...

CVE-2020-7489: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software versions in security notification. The result of this vulnerability, DLL substitution, coul...

April 14, 2020—KB4550922 (OS Build 17134.1425)

April 14, 2020—KB4550922 OS Build 17134.1425 Applies To Windows 10, version 1803, all editions Windows 10, version 1803 Enterprise, Education, IoT Enterprise Note NEW IMPORTANT We have been evaluating the public health situation, and we understand this is impacting our customers. In response to...

Description of the security update for Project 2016: April 14, 2020

Description of the security update for Project 2016: April 14, 2020 Applies To Project Professional 2016 Project Standard 2016 Summary This security update resolves a remote code execution vulnerability that exists if Microsoft Office incorrectly loads arbitrary type libraries. To learn more abou...

Description of the security update for Project 2010: April 14, 2020

Description of the security update for Project 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office improperly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilities...

End of support for Office 2010

End of support for Office 2010 Applies To Office 2010 Get help with Copilot How do I get help with end of support for Office 2010? What is end of support for Office 2013? Walk me through end of support for Microsoft 365 2010. Support for Office 2010 ended on October 13, 2020 and there will be no...

PT-2020-2064

Name of the Vulnerable Software and Affected Versions Vijeo Designer Basic versions V1.1 HotFix 15 and prior Vijeo Designer versions V6.9 SP9 and prior Description A vulnerability exists in the software related to untrusted search paths, which could allow an attacker to execute arbitrary code on...

CVE-2020-6219: Deserialization of Untrusted Data

SAP Business Objects Business Intelligence Platform CrystalReports WebForm Viewer, versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service a...

MS15-081: Description of the security update for Word 2013: August 11, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office...

CVE-2019-12529

An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checki...

CVE-2019-12527

A flaw was discovered in Squid versions 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data but does not check that the decoded length is not greater than the buffer. This flaw leads to a heap-based buffer overflow...

CVE-2020-8966

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments scripts into a legitimate web page...

CVE-2020-8966: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments scripts into a legitimate web page...

PT-2020-20402

Name of the Vulnerable Software and Affected Versions Tiki-Wiki CMS versions through 20.0 Description The issue is related to an Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS. This allows malicious users to inject malicious code fragments, such as...

Unknown 'WildPressure' Malware Campaign Lets Off Steam in Middle East

A malware campaign that shares no known similarities to previous attacks has been uncovered, targeting organizations in the Middle East. Dubbed “WildPressure,” the campaign used a previously unknown malware that researchers named Milum, after the C++ class names inside the code. According to...