9531 matches found
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4580468)
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4580468 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
Description of the security update for Office 2010: October 13, 2020
Description of the security update for Office 2010: October 13, 2020 Summary This security update resolves remote code execution vulnerabilities that exist in Microsoft Office software when the software fails to properly handle objects in memory. To learn more about these vulnerabilities, see...
Windows Camera Codec Pack Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...
Description of the security update for Excel 2010: October 13, 2020
Description of the security update for Excel 2010: October 13, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following securi...
Description of the security update for Office 2013: October 13, 2020
Description of the security update for Office 2013: October 13, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for SharePoint Enterprise Server 2016: October 13, 2020
None None...
Description of the security update for Outlook 2010: October 13, 2020
Description of the security update for Outlook 2010: October 13, 2020 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Outlook software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Description of the security update for Office 2010: October 13, 2020
Description of the security update for Office 2010: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word if the software does not correctly handle .LNK files. To learn more about the vulnerability, see Microsoft Common...
Windows Camera Codec Pack Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...
PT-2020-4325 · Microsoft · Windows Camera Codec Pack +1
Name of the Vulnerable Software and Affected Versions: Windows Camera Codec Pack affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Camera Codec Pack. Exploitation of this issue could allow an attacker to execute arbitrary...
DST correction in Windows for the Fiji Islands: October 13, 2020
None None...
KB4580327: Windows 10 October 2020 Security Update
The remote Windows host is missing security update 4580327. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...
Possible XSS Vulnerability in Action Pack in Development Mode
There is a possible XSS vulnerability in Action Pack while the application server is in development mode. This vulnerability is in the Actionable Exceptions middleware. This vulnerability has been assigned the CVE identifier CVE-2020-8264. Versions Affected: = 6.0.0 Not affected: 6.0.0 Fixed...
Security Bulletin: A security vulnerability has been identified in Tivoli Netcool/OMNIbus WebGUI shipped with IBM Operations Analytics Predictive Insights
Summary Tivoli Netcool/OMNIbus WebGUI is shipped as a component of IBM Operations Analytics Predictive Insights. Information about possible 'command injection' security vulnerability was reported to affect multiple Web GUI pages. Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: Cross-Site Scripting (XSS) fixed in IBM Security Access Manager 9.0.7.2 (CVE-2019-4725)
Summary A Cross-Site Scripting vulnerability reported in IBM Security Access Manager 9.0.7.0IF1 was fixed in IBM Security Access Manager 9.0.7.2 Vulnerability Details CVEID: CVE-2019-4725 DESCRIPTION: IBM Security Access Manager is vulnerable to cross-site scripting. This vulnerability allows use...
PT-2021-4108 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A null pointer dereference was found in the PackLinuxElf::canUnpack function in p lx elf.cpp, which can allow attackers to execute arbitrary code and cause a denial of service via a crafted file. This issue may...
Security Bulletin: Vulnerability in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2020-4590)
Summary WebSphere Application Server Liberty is vulnerable to a denial of service. This has been addressed. Vulnerability Details CVEID: CVE-2020-4590 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is...
PT-2022-8863 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: UPX affected versions not specified Description: An out-of-bounds read access issue was discovered in the PackLinuxElf64::canPack function of the p lx elf.cpp file. This could be triggered by an attacker using a crafted input file, potentiall...
Security Bulletin: WebSphere Application Server is vulnerable to an information disclosure vulnerability (CVE-2020-4629)
Summary WebSphere Application Server is vulnerable to an information disclosure vulnerability. This has been addressed. Vulnerability Details CVEID: CVE-2020-4629 DESCRIPTION: IBM WebSphere Application Server could allow a local user with specialized access to obtain sensitive information from a...
The vulnerability of the Windows Language Pack Installer component on Windows operating systems allows a malicious individual to execute processes under privileged access.
The vulnerability of the Windows Language Pack Installer component in Windows operating systems is related to file operation errors. Exploiting this vulnerability can allow an attacker to execute processes in privileged mode using a specially created application...