374 matches found
Microsoft Windows GDI Component CVE-2019-0774 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows Active Directory CVE-2019-0683 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for...
Microsoft Windows GDI Component CVE-2019-0614 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
China Unicom's router gateway device suffers from information leakage vulnerability
China United Network Communications Group Corporation "China Unicom" is a telecommunications operator in China. An information leakage vulnerability exists in a router gateway device of China Unicom. The gateway's management page allows external network access, which can be used to obtain...
CVE-2019-6139
Forcepoint User ID FUID server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on...
Citrix Workspace app fails with "cannot connect to the server" when connected externally
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver for MAC and Windows failing to add store...
Microsoft Exchange Server CVE-2018-8448 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 21 Microsoft Exchange Server 2016 Cumulative Update 10 Recommendation...
Microsoft SQL Server Management Studio CVE-2018-8527 Information Disclosure Vulnerability
Description Microsoft SQL Server Management Studio is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SQL Server Management Studio 17.9 Microsoft SQL Server...
Microsoft Edge CVE-2018-8463 Remote Privilege Escalation Vulnerability
Description Microsoft Edge is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Edge Recommendations Block external access at the network boundary, unless external parties require service. Filter...
Microsoft Windows GDI Component CVE-2018-8396 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...
Microsoft Windows CVE-2018-8314 Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft Windows 7 for 32-bit Systems SP1...
Microsoft MSR JavaScript Cryptography Library CVE-2018-8319 Remote Security Bypass Vulnerability
Description Microsoft MSR JavaScript Cryptography Library is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft MSR JavaScrip...
Microsoft Windows Mail Client CVE-2018-8305 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Mail and Calendar Microsoft People Recommendations Block external access at the...
Security Bulletin: IBM TRIRIGA Application Platform Information Disclosure (CVE-2017-1374)
Summary IBM TRIRIGA Application Platform is vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2017-1374 DESCRIPTION: Sensitive data can be exposed in the IBM TRIRIGA Application platform that can lead to an attacker gaining unauthorized access to the system. CVSS Ba...
Security Bulletin: IBM TRIRIGA Application Privilege Escalation (CVE-2017-1153)
Summary The IBM TRIRIGA Application is vulnerable to privilege escalation vulnerability. Vulnerability Details CVEID: CVE-2017-1153 DESCRIPTION: IBM TRIRIGA Report Manager contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. CVSS Base...
Security Bulletin: IBM TRIRIGA Application Unintended Proxy or Intermediary (CVE-2016-0362)
Summary IBM TRIRIGA platform allows remote attackers to use one of its web services as a proxy to forward HTTP requests to other internal/external Web resources. Vulnerability Details CVEID: CVE-2016-0362 CVSS Base Score: 4.3 CVSS Temporal Score: See for the current score CVSS Environmental Score...
Security Bulletin: IBM TRIRIGA Application Platform Information disclosure (CVE-2016-0345)
Summary The IBM TRIRIGA Application Platform no longer discloses server file path information when Birt reports are rendered. Vulnerability Details CVEID: CVE-2016-0345 CVSS Base Score: 4.3 CVSS Temporal Score: See for the current score CVSS Environmental Score: Undefined CVSS Vector:...
Microsoft Exchange Server CVE-2018-8159 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 19 Microsoft Exchange Server 2013 Cumulative Update 20 Microsoft...
Microsoft Exchange Server CVE-2018-8152 Remote Privilege Escalation Vulnerability
Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2016 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 9 Recommendations...
Microsoft Windows Remote Assistance CVE-2018-0878 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Window...