4799 matches found
Drupal 8.5.x < 8.5.11 / 8.6.x < 8.6.10 Remote Code Execution (SA-CORE-2019-003)
According to its self-reported version, the instance of Drupal running on the remote web server is 8.5.x prior to 8.5.11, or 8.6.x prior to 8.6.10. It is, therefore, affected by a remote code execution vulnerability due to improper sanitization of data from non-form sources. %NASLMINLEVEL 70300 C...
Cumulative Update 1 for Exchange Server 2019
None None...
February 12, 2019âKB4486993 (Security-only update)
None None...
Description of the security update for SharePoint Enterprise Server 2016: February 12, 2019
None None...
February 12, 2019âKB4487028 (Security-only update)
None None...
Update Rollup 26 for Exchange Server 2010 Service Pack 3
Update Rollup 26 for Exchange Server 2010 Service Pack 3 Summary This update rollup is a security update. This update provides a security advisory in Microsoft Exchange. See Security Advisory ADV190004 for more information. It also resolves some vulnerabilities, see Microsoft Common Vulnerabiliti...
Fortinet FortiGate < 5.6.8 / 6.x < 6.0.3 LDAP Credential Disclosure (FG-IR-18-157)
The remote host is running FortiOS prior to 5.6.8 or 6.x prior to 6.0.3. It is, therefore, affected by a credential disclosure vulnerability in the LDAP connectivity test component. This can allow a remote, read-only admin authenticated attacker to obtain the configured LDAP server login...
PT-2019-18100 ¡ Gnu +3 ¡ Gnu Recutils +3
Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8 Description: A memory leak was found in the rec aggregate reg new function in rec-aggregate.c within librec.a. Recommendations: For GNU Recutils version 1.8, consider updating to a newer version that addresses the...
Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2596760)
This host is missing an important security update according to Microsoft KB2596760 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB3172522)
This host is missing an important security update according to Microsoft KB3172522 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB4480961)
This host is missing a critical security update according to Microsoft KB4480961 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
January 8, 2019âKB4480961 (OS Build 14393.2724)
None None...
Update Rollup 25 for Exchange Server 2010 Service Pack 3
Update Rollup 25 for Exchange Server 2010 Service Pack 3 Summary This update rollup is a security update. This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...
January 8, 2019âKB4480973 (OS Build 15063.1563)
None None...
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: January 8, 2019
None None...
January 8, 2019âKB4480978 (OS Build 16299.904)
None None...
SSH Known Hard Coded Private Keys
The remote host is running a service that is using a publicly known SSH private key. An attacker may use this key to decrypt intercepted traffic between users and the device. A remote attacker can also perform a man-in-the-middle attack in order to gain access to the system or modify data in...
Security Updates for Internet Explorer (January 2019)
The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input. An attacker could execute arbitrary code in...
Fedora 29 : mosquitto (2018-f80b495582)
Update to new upstream version 1.5.5 rhbz1660413, rhbz1660414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 28 : seamonkey (2018-1c5750c688)
Based on the Firefox/Thunderbird ESR extension support release code version 52.7.3 Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-e sr/ and https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbi rd/ for more info. Note that...