Insecure Deserialization in Backend User Settings

It has been discovered that backend user settings in $BEUSER-uc are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability...

KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of...

typo3 -- multiple vulnerabilities

Typo3 News: CVE-2020-11063: TYPO3-CORE-SA-2020-001: Information Disclosure in Password Reset It has been discovered that time-based attacks can be used with the password reset functionality for backend users. This allows an attacker to verify whether a backend user account with a given email...

Used Tesla Components Contain Personal Information

Used Tesla components, sold on eBay, still contain personal information, even after a factory reset. This is a decades-old problem. It's a problem with used hard drives. It's a problem with used photocopiers and printers. It will be a problem with IoT devices. It'll be a problem with everything,...

The vulnerability of program elements for implementing the MediaWiki hypertext environment involves redirecting URLs to an unreliable website. This allows a malicious user to gain unauthorized access to confidential data and compromise the integrity of those data.

The vulnerability of the software components used to implement the MediaWiki hypertext environment is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to confidential data and...

Android Security Bulletin—May 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

[SECURITY] Fedora 32 Update: php-horde-horde-5.2.22-1.fc32

The Horde Application Framework is a flexible, modular, general-purpose web application framework written in PHP. It provides an extensive array of components that are targeted at the common problems and tasks involved in developing modern web applications. It is the basis for a large number of...

CVE-2020-5892

In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory...

gcc-toolset-9-strace bug fix and enhancement update

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documente...

Security Bulletin: Vulnerabilities exist in Watson Explorer (CVE-2019-4720, CVE-2019-12406)

Summary Security vulnerabilities affect IBM Watson Explorer. Vulnerability Details CVEID: CVE-2019-4720 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this...

Some Receiver Components Fail to Install and Function After Windows 10 Update

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After upgrading Windows 10 to a new feature update and attempting to install Citrix Receiver or the...

F5 BIG-IQ Centralized Management Operating System Command Injection Vulnerability

F5 BIG-IQ Centralized Management is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery and network services across public and private clouds, traditional data centers and hybrid environments. A security vulnerability exists in F5...

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: November 2010

Describes the Office Communications Server 2007 R2, Core Components issue that is fixed in the cumulative update for Office Communications Server 2007 R2, Core Component that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Core Components...

Description of the update package for Communications Server 2007 R2, Web Components: March, 2011

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated March 2011.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

Description of Office Access Runtime and Data Connectivity Components 2007 SP3

Describes the improvements that Office Access Runtime and Data Connectivity Components 2007 SP3 provides and the issues that it fixes.IntroductionMicrosoft Office Access Runtime and Data Connectivity Components 2007 Service Pack 3 SP3 provides the latest updates to Microsoft Office Access 2007...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SPSS Statistics: CVE-2015-1932, CVE-2015-2601, CVE-2015-2613, CVE-2015-2625

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 1.6 and 1.7 that are used by IBM SPSS Statistics. These issues were disclosed as part of the IBM Java SDK updates in July 2015. Vulnerability Details CVEID: CVE-2015-2613 DESCRIPTION: An...

Microsoft Windows Graphics Components Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. A remote code execution vulnerabili...

Microsoft Windows Graphics Components Privilege Mobilization Vulnerability (CNVD-2020-25580)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. An elevation of privilege...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded Security Components

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...