3822 matches found
Security Updates for Outlook (October 2018)
The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities including a remote code execution vulnerability requiring user interaction. See Microsoft Security Advisory ADV180026 for more information. C Tenable...
September 26, 2018—KB4457136 (OS Build 16299.699)
None None...
September 26, 2018—KB4458469 (OS Build 17134.320)
None None...
CVE-2018-16793
Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA Outlook Web Access login page...
CVE-2018-16793
CVE-2018-16793 : Concrete details across connected sources show a server-side request forgery (SSRF) in Rollup 18 for Microsoft Exchange Server 2010 SP3 and earlier, exploitable via the username parameter in the OWA login page (/owa/auth/logon.aspx). The underlying issue is a SSRF condition that ...
CVE-2018-16793
Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA Outlook Web Access login page...
Description of the update for Communicator 2007 R2: Oct 2009
Provides information about the update for Communicator 2007 R2 that is dated Oct 2009.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated Oct 2009.This article describes the following items about the...
CVE-2018-12381
Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected...
mozilla -- multiple vulnerabilities
Mozilla Foundation reports: CVE-2018-12377: Use-after-free in refresh driver timers CVE-2018-12378: Use-after-free in IndexedDB CVE-2018-12379: Out-of-bounds write with malicious MAR file CVE-2017-16541: Proxy bypass using automount and autofs CVE-2018-12381: Dragging and dropping Outlook email...
Security vulnerabilities fixed in Firefox ESR 60.2 — Mozilla
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. A use-after-free vulnerability can occur when an IndexedDB index is deleted while...
Microsoft Outlook 2016 Defense in Depth Vulnerability (KB4032235)
This host is missing an important security update according to Microsoft KB4032235 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2010 Service Pack 2 Defense in Depth Vulnerability (KB4032222)
This host is missing an important security update according to Microsoft KB4032222. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Security Updates for Outlook (August 2018)
The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The...
Microsoft Outlook 2013 Service Pack 1 Defense in Depth Vulnerability (KB4032240)
This host is missing an important security update according to Microsoft KB4032240. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Security Update for Microsoft Outlook 2013 (KB4032240) 32-Bit Edition
A security vulnerability exists in Microsoft Outlook 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Outlook 2016 (KB4032235) 32-Bit Edition
A security vulnerability exists in Microsoft Outlook 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Outlook 2013 (KB4032240) 64-Bit Edition
A security vulnerability exists in Microsoft Outlook 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Outlook 2016 (KB4032235) 64-Bit Edition
A security vulnerability exists in Microsoft Outlook 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for Outlook 2013: August 14, 2018
Description of the security update for Outlook 2013: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures ADV180021. Note To apply this security update, you must hav...
Description of the security update for Outlook 2010: August 14, 2018
Description of the security update for Outlook 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures ADV180021. Note To apply this security update, you must hav...