Description of the security update for Office 2013: May 11, 2021 (KB5001925)

Description of the security update for Office 2013: May 11, 2021 KB5001925 Summary This security update resolves a Microsoft Office Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31176. Note: To apply this...

Description of the security update for Office Web Apps Server 2013: May 11, 2021 (KB5001928)

None None...

Description of the security update for Office 2013: May 11, 2021 (KB4464542)

Description of the security update for Office 2013: May 11, 2021 KB4464542 Summary This security update resolves a Microsoft Office Graphics remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31180. Note: To appl...

Description of the security update for Office Online Server: May 11, 2021 (KB5001914)

None None...

Exploit for Code Injection in Samba

noSAMBAnoCRY CVE-2017-7494 Remote exploit for the SAMBA CVE-2...

PT-2024-11097 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc7-syzkaller Description: The vulnerability is related to netfilter: nftables, where overflows can occur in nft hash buckets due to the number of buckets being stored in 32-bit variables. This issue was...

EulerOS 2.0 SP3 : dnsmasq (EulerOS-SA-2021-1775)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be...

CVE-2021-1501

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

Apple AirDrop Bug Could Leak Your Personal Info to Anyone Nearby

New research has uncovered privacy weaknesses in Apple's wireless file-sharing protocol that could result in the exposure of a user's contact information such as email addresses and phone numbers. "As an attacker, it is possible to learn the phone numbers and email addresses of AirDrop users – ev...

jquery-bbq 安全漏洞

jquery-bbq is an application. jQuery BBQ enables simple but powerful hash history via the cross-browser window.onhashchange event. A security vulnerability exists in jquery-bbq 1.2.1, which stems from an improperly controlled modification of the Object. prototype property that allows a malicious...

SUSE: Security Advisory (SUSE-SU-2020:1920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-18221 · Unknown · Jose-Node-Cjs-Runtime

Name of the Vulnerable Software and Affected Versions: jose-node-cjs-runtime versions prior to 3.11.4 Description: The AES CBC HMAC SHA2 Algorithm decryption in the jose-node-cjs-runtime package has a timing difference when a padding error occurs, creating a padding oracle. This allows an adversa...

SAP NetWeaver Application Server for Java Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...

GO-2020-0047 Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml

XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input...

PT-2021-8381 · Github.Com/Robbert229/Jwt +2 · Github.Com/Robbert229/Jwt +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency...

PT-2021-12078 · Github.Com/Robotsandpencils/Go Saml +2 · Github.Com/Robotsandpencils/Go-Saml +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns XML Digital Signatures that use SHA-1 for generation and validation. This may allow an attacker to craft inputs that cause hash...

Description of the security update for Outlook 2016: April 13, 2021 (KB4504712)

None None...

Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 (KB4504705)

Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 KB4504705 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...

Description of the security update for Office 2013: April 13, 2021 (KB4504726)

Description of the security update for Office 2013: April 13, 2021 KB4504726 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28449. Note: To apply this...