Lucene search
+L

8328 matches found

Microsoft KB
Microsoft KB
added 2019/01/08 8:00 a.m.45 views

Internet Explorer help

None None...

9.3CVSS7.2AI score0.53202EPSS
SaveExploits4
Microsoft KB
Microsoft KB
added 2019/01/08 8:00 a.m.68 views

Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019

Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

9.3CVSS7.5AI score0.21967EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/01/08 8:00 a.m.69 views

Description of the security update for Office 2010: January 8, 2019

Description of the security update for Office 2010: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS7.8AI score0.21967EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/01/08 8:00 a.m.72 views

End of support for Office 2013

End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...

9.3CVSS7.2AI score0.21967EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/01/08 8:00 a.m.247 views

End of support for Office 2010

End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...

9.3CVSS6.6AI score0.21967EPSS
SaveExploits0
CISA
CISA
added 2019/01/08 12:00 a.m.11 views

Microsoft Releases January 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. The National Cybersecurity and Communications Integration Center NCCIC, part of the Cybersecurity and...

7.1AI score
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2019/01/08 12:00 a.m.46 views

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: January 8, 2019

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: January 8, 2019 Summary A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. To...

9.3CVSS7.5AI score0.20505EPSS
SaveExploits1
OSV
OSV
added 2019/01/07 7:14 p.m.4 views

GHSA-92WJ-X78C-M4FX XML External Entity Reference in Apache Karaf

Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XXE. This is a...

9.8CVSS7AI score0.07289EPSS
SaveExploits0References5
Prion
Prion
added 2019/01/07 4:29 p.m.25 views

Design/Logic Flaw

Apache Karaf provides a features deployer, which allows users to "hot deploy" a features XML by dropping the file directly in the deploy folder. The features XML is parsed by XMLInputFactory class. Apache Karaf XMLInputFactory class doesn't contain any mitigation codes against XXE. This is a...

7.5CVSS9.4AI score0.07289EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/01/02 12:00 a.m.56 views

SUSE SLES12 Security Update : java-1_6_0-ibm (SUSE-SU-2014:1541-1) (POODLE)

java-160-ibm was updated to version 1.6.0sr16.2 to fix 18 security issues. These security issues were fixed : - Unspecified vulnerability in Oracle Java SE 6u81 CVE-2014-3065. - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which...

10CVSS6.4AI score0.99999EPSS
SaveExploits8References41
OSV
OSV
added 2018/12/25 3:29 p.m.9 views

CVE-2018-20437

An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this report becaus...

7.5CVSS5.8AI score
SaveExploits0References3
Fedora
Fedora
added 2018/12/24 1:48 a.m.57 views

[SECURITY] Fedora 28 Update: ansible-2.7.5-1.fc28

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

7.8CVSS3.3AI score0.03113EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/12/19 8:00 a.m.62 views

December 19, 2018—KB4483230 (OS Build 15063.1508)

None None...

7.6CVSS6.9AI score0.29822EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/12/19 8:00 a.m.80 views

December 19, 2018—KB4483234 (OS Build 17134.472)

None None...

7.6CVSS6.9AI score0.29822EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/12/19 8:00 a.m.51 views

Internet Explorer help

None None...

7.6CVSS7.4AI score0.29822EPSS
SaveExploits0
Fedora
Fedora
added 2018/12/19 2:29 a.m.56 views

[SECURITY] Fedora 29 Update: ansible-2.7.5-1.fc29

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

5.3CVSS5AI score0.02483EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/12/18 12:03 p.m.142 views

Low: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links i...

5.3CVSS6.8AI score0.02483EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2018/12/18 12:03 p.m.147 views

Low: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

5.3CVSS6.8AI score0.02483EPSS
SaveExploits0References2
Microsoft Secure
Microsoft Secure
added 2018/12/17 5:00 p.m.103 views

Step 2. Manage authentication and safeguard access: top 10 actions to secure your environment

This series outlines the most fundamental steps you can take with your investment in Microsoft 365 security solutions. We will provide advice on activities such as setting up identity management through active directory, malware protection, and more. In this post, we explain how to enable single...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/12/15 6:05 a.m.223 views

Critical SQLite Flaw Leaves Millions of Apps Vulnerable to Hackers

Cybersecurity researchers have discovered a critical vulnerability in widely used SQLite database software that exposes billions of deployments to hackers. Dubbed as 'Magellan' by Tencent's Blade security team, the newly discovered SQLite flaw could allow remote attackers to execute arbitrary or...

0.1AI score
SaveExploits0
Rows per page
Query Builder