PT-2019-2688

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the JavaScript script handler in Internet Explorer. This could allow a remote attacker to execute arbitrary code usin...

Microsoft Internet Explorer Scripting Engine CVE-2019-1056 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet...

PT-2019-2689

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the scripting engine. This could allow a remote attacker to execute arbitrary code using a specially crafted web page...

PT-2019-2767

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue exists due to errors in handling objects in memory by the scripting engine. It could allow a remote attacker to execute arbitrary code using a specially crafted web page...

KB4507435: Windows 10 Version 1803 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507435. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

KB4507450: Windows 10 Version 1703 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507450. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...

Microsoft Internet Explorer Scripting Engine CVE-2019-1004 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet...

Microsoft Internet Explorer and Edge CVE-2019-1104 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsof...

PT-2019-2766

Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the JavaScript scripting engine handler in Microsoft browsers. This could allow a remote attacker ...

Security Updates for Internet Explorer (July 2019)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a...

KB4507456: Windows 7 and Windows Server 2008 R2 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507456 or cumulative update 4507449. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an authenticated attacker abuses...

KB4507469: Windows 10 Version 1809 and Windows Server 2019 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507469. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerabili...

KB4507464: Windows Server 2012 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507464 or cumulative update 4507462. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who...

KB4507461: Windows Server 2008 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507461 or cumulative update 4507452. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an authenticated attacker abuses...

Security Bulletin: Vulnerability affects Watson Explorer Foundational Components (CVE-2018-15756)

Summary Security vulnerability affects IBM Watson Explorer Foundational Components. Vulnerability Details CVEID: CVE-2018-15756 DESCRIPTION: Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the ResourceHttpRequestHandler. By adding a...

Security Bulletin: Vulnerability affects Watson Explorer Foundational Components (CVE-2019-1559)

Summary Security vulnerability affects IBM Watson Explorer Foundational Components. Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounte...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio (CVE-2018-1890, CVE-2019-2426)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio. Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio have addresse...

Welcome Spelevo: New exploit kit full of old tricks

Nick Biasini authored this post with contributions from Caitlyn Hammond. Executive summary Exploit kits are an ever-present and often forgotten threat on the landscape today. Their popularity seemed to peak several years ago with the success and eventual downfall of some of the best compromise...

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

Moderate: Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3.4

Updated ovirt-engine-api-explorer packages that fix several bugs and add various enhancements are now available. The ovirt-engine-api-explorer package provides a web application for exploring the oVirt API documentation...