13548 matches found
Description of the security update for Word 2010: March 10, 2020
Description of the security update for Word 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Description of the security update for SharePoint Foundation 2013: March 10, 2020
Description of the security update for SharePoint Foundation 2013: March 10, 2020 Summary This security update resolves a vulnerability that occurs if SharePoint Server does not correctly sanitize a specially crafted request to an affected SharePoint server. To learn more about the vulnerability,...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020
None None...
Description of the security update for SharePoint Server 2010: March 10, 2020
Description of the security update for SharePoint Server 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Description of the security update for Office 2010: March 10, 2020
Description of the security update for Office 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Servicing stack update for Windows 10, version 1803: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1903 and 1909: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1607: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1709: March 10, 2020
None None...
JPaseto weak hash vulnerability
JPaseto is a Java library for creating and parsing Paseto . A weak hash vulnerability exists in JPaseto versions prior to 0.3.0. The vulnerability stems from the fact that JPaseto generates weak hashes when using v2.local tokens. No details of the vulnerability are provided at this time...
CVE-2020-10244
JPaseto before 0.3.0 generates weak hashes when using v2.local tokens...
CVE-2020-10244
CVE-2020-10244 focuses on JPaseto before 0.3.0, where the library generates weak hashes when using v2.local tokens. The underlying issue is a weak-hash implementation in this version of JPaseto, not a description of an exploit or affected configurations. The consequence is unclear in the provided...
WAGO PFC100/200 Web-Based Management (WBM) Authentication Timing Information Disclosure Vulnerability
Summary An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials...
Servicing stack update for Windows Server 2008 SP2: March 10, 2020
Servicing stack update for Windows Server 2008 SP2: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU make sure that you have a robust and reliable servicing stack so that your...
Weak Cryptography Hash
github.com/yahoo/athenz is uses weak cryptographic hashes. The KeyRefresher uses the MD5 hash algorithm, which has been cryptographically broken, and hence cannot be used to guarantee data integrity...
Epignosis eFront LMS Password Reset authentication bypass vulnerability
Summary A predictable seed vulnerability eixsts in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the...
The vulnerability of the xenvif_set_hash_mapping function in Xen hypervisors allows a malicious actor to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the xenvifsethashmapping function in Xen hypervisors is related to integer overflow when processing requests to the netback driver. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and availability...
CVE-2012-0785
Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."...