13531 matches found
Ciphertext Malleability Issue in Tink Java
Impact Tink's Java version before 1.5 under some circumstances allowed attackers to change the key ID part of the ciphertext, resulting in the attacker creating a second ciphertext that will decrypt to the same plaintext. This can be a problem in particular in the case of encrypting with a...
GHSA-G5VF-V6WF-7W2R Ciphertext Malleability Issue in Tink Java
Impact Tink's Java version before 1.5 under some circumstances allowed attackers to change the key ID part of the ciphertext, resulting in the attacker creating a second ciphertext that will decrypt to the same plaintext. This can be a problem in particular in the case of encrypting with a...
Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2020
Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the...
Description of the security update for SharePoint Enterprise Server 2013: October 13, 2020
None None...
Description of the security update for Office 2010: October 13, 2020
Description of the security update for Office 2010: October 13, 2020 Summary This security update resolves remote code execution vulnerabilities that exist in Microsoft Office software when the software fails to properly handle objects in memory. To learn more about these vulnerabilities, see...
Description of the security update for Excel 2010: October 13, 2020
Description of the security update for Excel 2010: October 13, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securi...
Description of the security update for SharePoint Server 2010: October 13, 2020
Description of the security update for SharePoint Server 2010: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for Outlook 2013: October 13, 2020
Description of the security update for Outlook 2013: October 13, 2020 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for Outlook 2016: October 13, 2020
None None...
Description of the security update for Office Online Server: October 13, 2020
None None...
Description of the security update for Office 2013: October 13, 2020
Description of the security update for Office 2013: October 13, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: October 13, 2020
Description of the security update for Office 2010: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word if the software does not correctly handle .LNK files. To learn more about the vulnerability, see Microsoft Common...
MonoCMS Blog Information Disclosure Vulnerability
Mono is a free and open source project hosted by Xamarin previously Novell, first Ximian. A security vulnerability exists in version 1.0 of MonoCMS Blog, which stems from storing a hard-coded administrative hash in the log.xml file in the source file of MonoCMS Blog, with hash type bcrypt and has...
Servicing stack update for Windows 10, version 1803: October 13, 2020
None None...
Exploit for CVE-2020-1472
PoC exploit for CVE-2020-1472, a Windows ZeroLogon vulnerability. The exploit targets the Netlogon service on a Domain Controller DC and allows an attacker to set an empty password for the DC's machine account. This is achieved by exploiting the vulnerability in the Netlogon service, which allows...
CVE-2020-8228
creationtimestamp| type| source ---|---|--- 2020-10-05 18:27:12+00:00| seen| https://t.me/cibsecurity/15051...
MonoCMS Blog 1.0 - Arbitrary File Deletion (Authenticated)
Exploit Title: MonoCMS Blog 1.0 - Arbitrary File Deletion Authenticated Date: 2020-09-20 Exploit Author: Shahrukh Iqbal Mirza @shahrukhiqbal24 Vendor Homepage: https://monocms.com/download Software Link: https://monocms.com/download Version: 1.0 Tested On: Windows 10 XAMPP CVE: N/A Proof of...
The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the insufficient calculation of the password hash. This allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.
The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient calculation of the password hash. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...
EulerOS 2.0 SP3 : xerces-j2 (EulerOS-SA-2020-2068)
According to the version of the xerces-j2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service CPU consumption via a crafted message to an XML...
PYSEC-2020-310
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation of SparseFillEmptyRowsGrad uses a double indexing pattern. It is possible for reverseindexmapi to be an index outside of bounds of gradvalues, thus resulting in a heap buffer overflow. The issue is patched in...