HPE UIoT Unauthorized Access Vulnerability (CNVD-2020-33330)

HPE UIoT is a suite of universal IoT platforms from Hewlett Packard Enterprise HPE in the United States. The platform features data analytics, monetary safety and synchronization management. A security vulnerability exists in HPE UIoT 1.4.2 and prior versions. An attacker could exploit the...

Apple CUPS Buffer Overflow Vulnerability

Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS. The...

CVE-2020-7133

A unauthorized remote access vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

CVE-2020-7134

A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

CVE-2020-7133

A unauthorized remote access vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

CVE-2020-7134

A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

Connected Home Hubs Open Houses to Full Remote Takeover

Three different connected home hubs – Fibaro Home Center Lite, Homematic Central Control Unit CCU2 and Elko’s eLAN-RF-003 – are vulnerable in their older versions to serious bugs that would allow information disclosure, man-in-the-middle MiTM attacks and unauthenticated remote code execution RCE,...

April 21, 2020—KB4550944 (OS Build 17134.1456)

None None...

April 21, 2020—KB4550969 (OS Build 17763.1192)

None None...

October 14, 2014 update for SharePoint Server 2013 (KB2889930)

October 14, 2014 update for SharePoint Server 2013 KB2889930 This article describes update KB2889930 for Microsoft SharePoint Server 2013 that was released on October 14, 2014. Improvements and Fixes Fixes the following issue: Assume that you insert a shape that contains a hyperlink into a drawin...

Ensuring Business Continuity During Peak Times: 6 Recommendations to Optimize Streaming and Download Bandwidth Usage

A sudden and dramatic surge in internet traffic, much of which is driven by video streaming and game and software download events, is testing network infrastructures with unprecedented volume. The 30% increase in global traffic Akamai delivered from the edge during the past month, compared to the...

You Can Now Check If Your ISP Uses Basic Security Measures

“Is BGP Safe Yet” is a new site that names and shames internet service providers that don't tend to their routing...

Security guidance for remote desktop adoption

As the volume of remote workers quickly increased over the past two to three months, the IT teams in many companies scrambled to figure out how their infrastructures and technologies would be able to handle the increase in remote connections. Many companies were forced to enhance their capabiliti...

kernel: out-of-bounds array access in __xfrm_policy_unlink

A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...

Hackers Made the Snoo Smart Bassinet Shake and Play Loud Sounds

The now-patched flaws found in the popular internet-connected baby bed underscore the importance of getting security right...

Security Bulletin: SPSS Statistics ActiveX Control Code Execution Vulnerability Notification (CVE-2015-0140)

Summary SPSS Statistics ActiveX control on Windows 32 bit installations could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to visit a specially-crafted Web page with Internet Explorer, a local attacker could exploit this vulnerability to execute arbitrar...

MS09-034: Cumulative security update for Internet Explorer

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted Web page by using Internet Explorer. Accounts that are configured to have fewer user rights could be affected less.The update that this article describes has been replaced by a...

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A security vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE versions...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2020-23445)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A security vulnerability exists in the way memory objects are handled in the scripting engine of Microsoft IE versions 11 and 9. An attacker could exploit the...

Microsoft Internet Explorer VBScript Engine Buffer Overflow Vulnerability (CNVD-2020-31543)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A security vulnerability exists in the way the VBScript Engine handles memory objects in Microsoft IE versions...