2471 matches found
Microsoft Office 2007 Service Pack 3 Defense in Depth Vulnerability (KB4011063)
This host is missing an important security update according to Microsoft KB4011063 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2016 Defense in Depth Update (KB4011091)
This host is missing an important security update according to Microsoft KB4011091 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Description of the security update for Outlook 2013: September 12, 2017
Description of the security update for Outlook 2013: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, y...
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure...
Description of the security update for Office 2010: September 12, 2017
Description of the security update for Office 2010: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, yo...
Description of the security update for Outlook 2016: September 12, 2017
None None...
Description of the security update for Outlook 2007: September 19, 2017
Description of the security update for Outlook 2007: September 19, 2017 Summary This update provides defense-in-depth changes to help improve security in Microsoft Outlook 2007. To learn more about these vulnerabilities, see Advisory ADV170015. Note To apply this security update, you must have th...
Description of the security update for Office 2016: September 12, 2017
None None...
Description of the security update for Office 2013: September 12, 2017
Description of the security update for Office 2013: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, yo...
Lynis 2.5.5 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
CVE-2017-14173
In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...
Siemens Fixes Session Hijacking Bug in LOGO!, Warns of Man-in-the-Middle Attacks
Administrators who have Siemens’ LOGO! logic module deployed in automation setups are being urged to update its firmware. The German industrial manufacturing giant pushed out an update for its LOGO! 8 BM devices Wednesday morning to fix a vulnerability CVE-2017-12734 that could let an attacker...
Siemens LOGO! (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO! Vulnerabilities: Insufficiently Protected Credentials, Man-in-the-Middle 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...
The vulnerability of the GetImageDepth function in MagickCore/attribute.c, a console-based graphic editor for ImageMagick, allows a hacker to cause a service failure.
The vulnerability of the GetImageDepth function in MagickCore/attribute.c of the ImageMagick console graphic editor is related to the writing of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure rereading of the buffer in dynami...
NetScaler SD-WAN QOS and Application Rules
Citrix SD-WAN, formerly NetScaler SD-WAN Table of Contents Introduction QOS Components Transmit Modes Queue Depth IP Rules Application QOS rules with release 9.3 Basic Rules Basic guidance on Rules. Other Settings that affect Applications. Appendix A: Default Rules Breakdown Introduction The...
July 25, 2017 – Morning Cyber Coffee Headlines – “Henry Ford” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 25, 2017 - Headlines UK gov wants teens to practice cybersecurity in their...
Lynis 2.5.2 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
Siemens SIPROTEC 4 and SIPROTEC Compact (Update B)
CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...
Siemens SIPROTEC 4 and SIPROTEC Compact (Update D)
CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...
Siemens SIPROTEC 4 and SIPROTEC Compact
CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication AFFECTED PRODUCTS Siemens reports that the vulnerabilities affect the...