4799 matches found
Description of the security update for Word 2013: December 10, 2019
Description of the security update for Word 2013: December 10, 2019 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...
December 10, 2019âKB4530717 (OS Build 17134.1184)
None None...
December 10, 2019âKB4530715 (OS Build 17763.914)
None None...
Description of the security update for Excel 2013: December 10, 2019
Description of the security update for Excel 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel imcorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
December 10, 2019âKB4530691 (Monthly Rollup)
None None...
December 10, 2019âKB4530692 (Security-only update)
None None...
December 10, 2019âKB4530730 (Security-only update)
None None...
OMRON CX-Supervisor Vulnerable Third-Party Component Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Teamviewer tha...
[ASA-201912-3] crypto++: private key recovery
Arch Linux Security Advisory ASA-201912-3 ========================================= Severity: High Date : 2019-12-06 CVE-ID : CVE-2019-14318 Package : crypto++ Type : private key recovery Remote : Yes Link : https://security.archlinux.org/AVG-1046 Summary ======= The package crypto++ before versi...
FreeSWITCH Default Password (mod_event_socket)
FreeSWITCH is using a known default password in the modeventsocket component. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
D-Link DNS-320 Remote Command Injection Vulnerability - Active Check
The D-Link DNS-320 NAS-device is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
VMware WorkStation 12.5.5 - Virtual Machine Escape Exploit
VMware Escape Exploit VMware Escape Exploit before VMware WorkStation 12.5.5 Host Target: Win10 x64 Compiler: VS2013 Test on VMware 12.5.2 build-4638234 Known issues Failing to heap manipulation causes host process crash. Not quite elaborate because I'm not good at doing heap "fengshui" on winows...
PT-2019-7094 ¡ Red Hat ¡ Redhat-Upgrade-Tool
Name of the Vulnerable Software and Affected Versions: redhat-upgrade-tool affected versions not specified Description: The issue is related to the redhat-upgrade-tool not checking GPG signatures when upgrading versions. Recommendations: At the moment, there is no information about a newer versio...
Nextcloud: Downgrade encryption scheme and break integrity through known-plaintext attack
The idea behind the Server Side Encryption is that you can move your encrypted files to an external party without that external party being able to to read or modify those files. Some time ago, Nextcloud switched from unauthenticated CFB cipher block mode to authenticated CTR cipher block mode in...
November 19, 2019âKB4525251 (Preview of Monthly Rollup)
None None...
gitea -- multiple vulnerabilities
The Gitea Team reports: This release contains five security fixes, so we recommend updating: Fix issue with user.fullname Ignore mentions for users with no access Be more strict with git arguments Extract the username and password from the mirror url Reserve .well-known username...
Microsoft Windows Multiple Vulnerabilities (KB4523205)
This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Multiple Vulnerabilities (KB4525237)
This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...