CVE-2019-18335

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an...

CVE-2019-18319

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...

CVE-2019-18286

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have...

Security Bulletin: WebSphere Application Server Liberty is vulnerable to Cross-site Scripting (CVE-2019-4663)

Summary There is a cross-site scripting vulnerability in the Admin Center. This has been addressed. Vulnerability Details CVEID: CVE-2019-4663 DESCRIPTION: IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri...

Microsoft Excel 2010 Service Pack 2 Information Disclosure Vulnerability (KB4484196)

This host is missing an important security update according to Microsoft KB4484196 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft PowerPoint 2010 Service Pack 2 RCE Vulnerability (KB4461613)

This host is missing an important security update according to Microsoft KB4461613 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4484186)

This host is missing an important security update according to Microsoft KB4484186 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Information Disclosure Vulnerability (KB4484192)

This host is missing an important security update according to Microsoft KB4484192 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Information Disclosure Vulnerability (KB4484190)

This host is missing an important security update according to Microsoft KB4484190 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Windows Remote Desktop Protocol Information Disclosure Vulnerability

Microsoft Windows XP is a suite of operating systems for use with PCs and tablets from Microsoft Corporation USA.Remote Desktop Protocol is a remote desktop protocol. An information disclosure vulnerability exists in Remote Desktop Protocol in the SP3 version of Microsoft Windows XP, which arises...

Description of the security update for Office 2010: December 10, 2019

Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...

Description of the security update for Office 2010: December 10, 2019

Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...

Description of the security update for PowerPoint 2010: December 10, 2019

Description of the security update for PowerPoint 2010: December 10, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft PowerPoint software if the software does not correctly handle objects in memory. To learn more about the vulnerability, se...

Description of the security update for Excel 2013: December 10, 2019

Description of the security update for Excel 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel imcorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...

December 10, 2019—KB4530734 (Monthly Rollup)

None None...

EulerOS Virtualization for ARM 64 3.0.3.0 : perl (EulerOS-SA-2019-2326)

According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow,...

Security Bulletin: IBM InfoSphere Information Analyzer is affected by an AngularJS client-side template injection vulnerability

Summary An AngularJS client-side template injection vulnerability was addressed by IBM InfoSphere Information Analyzer. Vulnerability Details CVEID: CVE-2019-4660DESCRIPTION: It is possible to inject AngularJS template syntax in an internal page request within Information Analyzer, which is...

Security Bulletin: IBM® Db2® is vulnerable to information disclosure (CVE-2019-4438)

Summary Db2 does not enforce required authorization for certain commands which may lead to information exposure to connected users if the database configuration parameter AUTOREVAL has been set to DEFERREDFORCE. Vulnerability Details CVEID: CVE-2019-4438 DESCRIPTION: IBM DB2 for Linux, UNIX and...

Security Bulletin: Multiple Security Vulnerabilities affect IBM Cloud Private Kubernetes

Summary Multiple Security Vulnerabilities affect IBM Cloud Private Kubernetes Vulnerability Details CVEID: CVE-2019-9513 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a Resource Loop attack. By creating multiple request streams and continually shuffling the priori...

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Go (CVE-2019-9512, CVE-2019-9514)

Summary Security Vulnerabilities affect IBM Cloud Private - Go Vulnerability Details CVEID: CVE-2019-9514 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a Reset Flood attack. By opening a number of streams and sending an invalid request over each stream, a remote...