22210 matches found
Description of the security update for SharePoint Server 2019 Language Pack: February 14, 2023 (KB5002330)
None None...
End of support for Office 2013
End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...
Description of the security update for SharePoint Enterprise Server 2013: February 14, 2023 (KB5002312)
None None...
Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)
None None...
Description of the security update for SharePoint Server 2019: February 14, 2023 (KB5002342)
None None...
Description of the security update for Office Web Apps Server 2013: February 14, 2023 (KB5002313)
None None...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: February 14, 2023 (KB5002325)
None None...
Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 (KB5002353)
None None...
KLA20226 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Defender for Endpoint can be...
PT-2023-3274 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: The issue is related to insufficient protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting attack in the DCE file upload endpoin...
PT-2023-1607 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: The issue is related to insufficient authorization procedures in the system, allowing a remote attacker to potentially execute arbitrary code. Specifically, it involves a...
PT-2023-1418 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: A vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. The issue is related to...
PT-2023-3273 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: A code injection issue exists, allowing for remote code execution when using a parameter of the DCE network settings endpoint. This could enable a remote attacker to execute...
HPESBHF04413 rev.1 - Certain HPE ProLiant Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server -Prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -Prior to 1.7202-02-2023 HPE ProLiant DL380 Gen10 Plus server -Prior t...
HPESBGN04447 rev.1 - HPE Intel E810 Series Ethernet Controllers, INTEL-SA-00770, Intel Network Adapter Software Advisory, Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel E810-XXVDA4 Ethernet 10/25Gb 4-port SFP28 Adapter for HPE - Prior to 4.01 Intel E810-CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE - Prior to 4.01 Intel E810-CQDA2...
PT-2023-1789 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: The issue is related to insufficient authorization procedures in the system, allowing a remote attacker to perform unauthorized functions, modify, or delete arbitrary conten...
PT-2023-3272 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions prior to 7.9.2 Description: The issue is related to improper control of code generation, allowing remote code execution via the hostname parameter when maliciously crafted hostname syntax is entered...
PT-2023-1391 · Schneider Electric · Struxureware Data Center Expert
Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions 7.9.2 and prior Description: A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could allow a user that knows the credentials t...
Security Bulletin: IBM Sterling Control Center is vulnerable to security bypass due to Eclipse Openj9 (CVE-2022-3676)
Summary IBM Sterling Control Center uses Eclipse Openj9 which could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. The issue has been addressed. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allo...
Security Bulletin: IBM Sterling Control Center is vulnerable to a denial of service due to Jave SE (CVE-2022-21626)
Summary An unspecified vulnerability in Java SE related to the Security component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors. Vulnerability Details CVEID:CVE-2022-21626 DESCRIPTION: An unspecified...