CVE-2020-15902

Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...

Security Bulletin: Vulnerability in IBM Java Runtime affects Watson Explorer (CVE-2020-2781)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer. Watson Explorer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-2781 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE JSSE compone...

Security Bulletin: Vulnerability in IBM Java Runtime affects Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2020-2654)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-26...

Security Bulletin: Vulnerability exists in Watson Explorer (CVE-2020-4329)

Summary Security vulnerability affects IBM Watson Explorer. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by...

Security Bulletin: Vulnerability affects Watson Explorer Foundational Components (CVE-2020-1967)

Summary Security vulnerability affects IBM Watson Explorer Foundational Components. Vulnerability Details CVEID: CVE-2020-1967 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference. By passing specially crafted data to the SSLcheckchain function during or...

CVE-2020-15902: Improper Neutralization of Input During Web Page Generation

Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...

PT-2020-14700 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.7.2 Description: The issue allows for XSS via the link url option in the Graph Explorer component. This could potentially lead to malicious script execution. Recommendations: For versions prior to 5.7.2, update t...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K20346072)

A use-after-free memory vulnerability exists in the BIG-IP Edge Client Windows ActiveX component. CVE-2020-5897 Impact This vulnerability allows an attacker to trigger memory corruption to the browser or execute code from the browser when the attacker crafts a malicious webpage and loads it into...

Microsoft Internet Explorer Memory Corruption (MS11-003; CVE-2011-0035)

A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker may create a...

CVE-2020-1432

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...

CVE-2020-1432

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...

Information disclosure

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...

CVE-2020-1432

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...

CVE-2020-1432

CVE-2020-1432 is an information-disclosure vulnerability affecting Skype for Business when accessed through Internet Explorer. The CNVD entry describes IE11 as the affected component and notes exploitation could enable an attacker to obtain user information via a specially crafted URL (e.g., a ph...

EUVD-2020-12308

An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...

Exploit for Improper Input Validation in Microsoft

FakeCVE-2020-1350 This is the source code for a very crude fa...

Microsoft Tackles 123 Fixes for July Patch Tuesday

A critical DNS bug and a publicly known elevation-of-privilege flaw top Microsoft’s July Patch Tuesday list of 123 fixes. The DNS flaw is a remote code-execution bug and is touted as one of the most critical Windows vulnerabilities released this year, earning the highest-severity CVSS score of 10...

July 14, 2020—KB4565503 (OS Build 19041.388)

July 14, 2020—KB4565503 OS Build 19041.388 Applies To Windows 10, version 2004, all editions Windows Server version 2004 Note NEW IMPORTANT Starting in July 2020, we will resume non-security releases for Windows 10 and Windows Server, version 1809 and later. There is no change to the cumulative...

July 14, 2020—KB4565535 (Security-only update)

July 14, 2020—KB4565535 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Note NEW IMPORTANT Windows Server 2012 has reached the end of mainstream support and is now in extended support. Starting in July 2020, there will no longer be optional, non-security releases...

July 14, 2020—KB4565540 (Security-only update)

July 14, 2020—KB4565540 Security-only update Applies To Windows 8.1 Windows Server 2012 R2 Windows Embedded 8.1 Industry Enterprise Windows Embedded 8.1 Industry Pro Note NEW IMPORTANT Windows 8.1 and Windows Server 2012 R2 have reached the end of mainstream support and are now in extended suppor...