3827 matches found
Microsoft Office Compatibility Pack Service Pack 3 Multiple RCE Vulnerabilities (KB4011607)
This host is missing a critical security update according to Microsoft KB4011607 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Website Glitch Let Me Overstock My Coinbase
Coinbase and Overstock.com just fixed a serious glitch that allowed Overstock customers to buy any item at a tiny fraction of the listed price. Potentially more punishing, the flaw let anyone paying with bitcoin reap many times the authorized bitcoin refund amount on any canceled Overstock orders...
Security Update for Microsoft Office Compatibility Pack Service Pack 3 (KB4011607)
A security vulnerability exists in Microsoft Office Compatibility Pack Service Pack 3 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
[SECURITY] Fedora 26 Update: xrdp-0.9.5-1.fc26
xrdp provides a fully functional RDP server compatible with a wide range of RDP clients, including FreeRDP and Microsoft RDP client...
Anti-Virus Updates Required Ahead of Microsoft’s Meltdown, Spectre Patches
Microsoft said it is holding off delivering security updates to Windows PCs for Spectre and Meltdown CPU flaws until hosted anti-virus software confirms it does not make unsupported calls into Windows kernel memory. Affected are PCs running certain AV products that bypass Windows built-in Kernel...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018
None None...
Microsoft Outlook CVE-2018-0793 Remote Code Execution Vulnerability
Description Microsoft Outlook is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition; this can result in the attacker gaining complete...
Security Updates for Microsoft Office Compatibility SP3 (January 2018)
The Microsoft Office Compatibility Pack products installed on the remote host are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in...
KLA11172 Multiple vulnerabilities in Microsoft Development Tools
Multiple serious vulnerabilities have been found in Microsoft .NET Core, ASP.NET Core, Microsoft Excel and Microsoft Office Compatibility Pack. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions and gain privileges...
App Layering: Nutanix AHV 5.5 support requires ELM 4.9 or above
App Layering 4.8 and before is not compatible with networking changes in Nutanix AHV 5.5. Depending on the operation you are performing, you may see any of these errors: Failed to connect to the server at 'host' A failure occurred connecting to the Nutanix server. Error = write EPROTO...
Carbon Black Solutions Currently Compatible With Major OS Vendor Patches on Meltdown & Spectre
Recently, researchers have released details on two classes of vulnerabilities in modern CPU hardware. These vulnerabilities affect unprecedented numbers of systems and are some of the more difficult issues to address in recent history. These vulnerabilities, dubbed Meltdown and Spectre, may be...
KLA11168 Multiple vulnerabilities in Microsoft SQL Server
Multiple information disclosure vulnerabilities have been found in Microsoft SQL Server. Malicious user can exploit these vulnerabilities to obtain sensitive information. These vulnerabilities can be exploited remotelly via speculative execution side-channel attack to obtain sensetive information...
Joomla YJ Live Search 2.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Joomla YJ Live Search Module 2.0 SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: http://www.youjoomla.com URL: http://www.youjoomla.com/joomla-extensions/yj-live-search-joomla-live-search-module.html Product: 'Joomla...
Blocking Windows Update from going to the next Windows 10 Feature Update (for example 1703 or 1709)
Citrix App layering, and probably other Citrix products, may not yet support the very latest version of Windows 10. For instance, Windows 10 1703 Creators Edition was not supported in App Layering until version 4.8. Unfortunately, "Feature Updates" are hard to block, because the Windows Update UI...
[SECURITY] Fedora 27 Update: python34-3.4.7-2.fc27
Python 3.4 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.4, see other distributions that support it, such as CentOS or RHEL with Software...
CryKeX - Linux Memory Cryptographic Keys Extractor
CryKeX - Linux Memory Cryptographic Keys Extractor Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges...
[SECURITY] Fedora 27 Update: linux-firmware-20171126-80.git17e62881.fc27
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 26 Update: docker-1.13.1-44.git584d391.fc26
Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...
Frame replay vulnerability in Wi-Fi subsystem in Intel® Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle
Summary: A vulnerability relating to frame replay during device sleep has been identified in the Intel® Dual-Band and Tri-Band Wireless-AC Products. An attacker who can successfully establish a channel-based man-in-the-middle can potentially replay frames to impact the integrity or availability o...