Description of the security update for Office 2016: April 13, 2021 (KB4504724)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: April 13, 2021 (KB4504715)

None None...

Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504723)

None None...

Description of the security update for SharePoint Enterprise Server 2013: April 13, 2021 (KB4493170)

None None...

Description of the security update for Excel 2013: April 13, 2021 (KB4504735)

Description of the security update for Excel 2013: April 13, 2021 KB4504735 Note: There may be some side effects after you install this update. For more information, see KB5003251. Summary This security update resolves a Microsoft Excel information disclosure vulnerability, and Excel Remote Code...

End of support for Office 2010

End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...

Description of the security update for Office Web Apps Server 2013: April 13, 2021 (KB4504729)

None None...

Description of the security update for Office 2010: April 13, 2021 (KB4504739)

Description of the security update for Office 2010: April 13, 2021 KB4504739 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28454. Note: To apply this...

Description of the security update for Office 2013: April 13, 2021 (KB4504727)

Description of the security update for Office 2013: April 13, 2021 KB4504727 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28454. Note: To apply this...

Description of the security update for SharePoint Enterprise Server 2013: April 13, 2021 (KB4493201)

None None...

SAP NetWeaver Application Server 信息泄露漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...

Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2021-1733)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GitHub Security Lab: [Java] CWE-759: Query to detect password hash without a salt

This bug was reported directly to GitHub Security Lab...

Haserl Arbitrary File Reader

This module exploits haserl prior to 0.9.36 to read arbitrary files. The most widely accepted exploitation vector is reading /etc/shadow, which will reveal root's hash for cracking. Module Options msf use post/linux/gather/haserlread msf posthaserlread show actions ...actions... msf posthaserlrea...

OpenSSL 1.1.1 < 1.1.1j Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1j. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1j advisory. - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial numb...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in eventpoll.c may lead to escalation of privilege CVE-2020-0466 kernel: SCSI target LIO write to any block on ILO backstore CVE-2020-28374 kernel: Use after free via PI...

OpenEMR 4.1.0 - (u) SQL Injection Exploit

Exploit Title: OpenEMR 4.1.0 - 'u' SQL Injection Exploit Author: Michael Ikua Vendor Homepage: https://www.open-emr.org/ Software Link: https://github.com/openemr/openemr/archive/refs/tags/v410.zip Version: 4.1.0 Original Advisory:...

CVE-2019-20466

The CVE-2019-20466 issue affects Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. A local attacker using the default account can read /etc/passwd, exposing a weakly hashed root password. Cracking the hash could grant root privileges on the device. Reports in PT-2021-9031 note that affect...

Unspecified Vulnerability in ForgeRock OpenAM

ForgeRock OpenAM is the United States ForgeRock Forgerock company's set of open source single sign-on framework SSO. The framework by providing the core identity services CoreServer to achieve a transparent single sign-on in a network architecture such as centralized , distributed single sign-on....

CVE-2021-29416

An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB...