13548 matches found
Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Tivoli Netcool Configuration Manager (ITNCM) (CVE-2015-7575)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 5 and earlier releases that is used by ITNCM. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016...
CVE-2019-19342
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose wi...
DEBIAN-CVE-2019-19234
In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...
UBUNTU-CVE-2019-19234
In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...
zookeeper: Information disclosure in Apache ZooKeeper
A flaw was found in Apache ZooKeeper. A lack of permission checks while retrieving ACLs allows unsalted hash values to be disclosed for unauthenticated or unprivileged users...
CVE-2019-3993
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request...
Information disclosure
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request...
CVE-2019-3993
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request...
CVE-2019-3993
Summary: CVE-2019-3993 affects ELOG 3.1.4-57bea22 and earlier. A remote unauthenticated attacker can cause an information disclosure to recover a user’s password hash via a crafted HTTP POST request, exposing credential material. Affected versions: ELOG 3.1.4-57bea22 and earlier (per Red Hat/RH, ...
ELOG < 3.1.4-283534d Multiple Vulnerabilities - Active Check
ELOG is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elogproject:elog"; ifdescription...
Siemens SPPA-T3000 Application Server Improper Authentication Vulnerability (CNVD-2019-45416)
SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.Application Server is the application server in it, which provides the main system services including access control, distribution of data to thin clients and archiving. A...
End of support for Office 2016 and Office 2019
None None...
Description of the security update for PowerPoint 2016: December 10, 2019
None None...
Description of the security update for Office 2010: December 10, 2019
Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Excel 2010: December 10, 2019
Description of the security update for Excel 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office 2010: December 10, 2019
Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Description of the security update for Skype for Business Server 2019 CU 2: December 10, 2018
None None...
Description of the security update for Office 2013: December 10, 2019
Description of the security update for Office 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office 2010: December 10, 2019
Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists in Microsoft Access software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for Word 2013: December 10, 2019
Description of the security update for Word 2013: December 10, 2019 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...