CVE-2020-5297: External Control of File Name or Path

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to upload jpg, jpeg, bmp, png, webp, gif, ico, css, js, woff, woff2, svg, ttf, eot, json, md, less, sass, scss, xml files to any directory of an October CMS server...

PT-2020-12549

Name of the Vulnerable Software and Affected Versions October CMS debugbar plugin versions prior to 3.1.0 Description The October CMS debugbar plugin contains a feature that logs all requests, including session data, when enabled. This poses a problem if the plugin is enabled on a system accessib...

CVE-2020-5295: Improper Control of Filename for Include/Require Statement in PHP Program

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the cms.manageassets permission. Issue has...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Information Server

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in October 2019 and January 2020. Vulnerability Details CVEID: CVE-2020-2593...

WordPress WP GDPR plugin <= 2.1.1 - Unauthenticated Arbitrary Comment Deletion vulnerability

Unauthenticated Arbitrary Comment Deletion vulnerability discovered by NinTechNet in WordPress WP GDPR plugin versions = 2.1.1. Solution This plugin has been closed as of October 23, 2019 and is not available for download. Reason: Security Issue...

Cumulative Update 18 for Microsoft Dynamics 365 Business Central October'18 on-premises (Application Build 41909, Platform Build 41879)

None None...

MS15-110: Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2015

MS15-110: Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2015 Summary This security update resolves vulnerabilities in Sharepoint. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS15-110. Note To apply this security update, you...

MS09-062: Description of the security update for Microsoft Visual Studio 2008: October 13, 2009

MS09-062: Description of the security update for Microsoft Visual Studio 2008: October 13, 2009 INTRODUCTION Microsoft has released security bulletin MS09-062. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009

MS09-062: Description of the security update for Microsoft Visual Studio 2008 Service Pack 1: October 13, 2009 INTRODUCTION Microsoft has released security bulletin MS09-062. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

CVE-2015-9547

An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...

October 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

October 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Important When you install this update 2995388 from Windows Update, update 2996799 is included in the installation. The October 2014 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update rollup package...

October 2016 Preview of Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

October 2016 Preview of Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 The October 2016 Preview of Monthly Quality Rollup includes some new improvements and fixes for the Windows 8.1 and Windows Server 2012 R2 platforms. We recommend that you apply this quality rollup as part o...

October 2016 Preview of Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

October 2016 Preview of Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 The October 2016 Preview of Monthly Quality Rollup includes some new improvements and fixes for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 platforms. We recommend that you apply this...

October 2016 Preview of Monthly Quality Rollup for Windows Server 2012

October 2016 Preview of Monthly Quality Rollup for Windows Server 2012 The October 2016 Preview of Monthly Quality Rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this quality rollup as part of your regular maintenance routines. Improvement...

CVE-2018-21052

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...

CVE-2018-21053

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is Clipboard access in the lockscreen state via a physical keyboard. The Samsung ID is SVE-2018-12684 October 2018...

CVE-2018-21053

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is Clipboard access in the lockscreen state via a physical keyboard. The Samsung ID is SVE-2018-12684 October 2018...

CVE-2018-21051

An issue was discovered on Samsung mobile devices with N7.x and O8.x Exynos chipsets software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 October 2018...

CVE-2017-18651

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. There is an Integer Overflow in processMSetTokenTUIPasswd during handling of a trusted application, leading to memory corruption. The Samsung IDs are SVE-2017-9008 and SVE-2017-9009 October 2017...