9531 matches found
Description of the security update for SharePoint Foundation 2013: July 14, 2020
Description of the security update for SharePoint Foundation 2013: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in PerformancePoint Services for SharePoint Server if the software does not check the source markup of XML file input. To learn...
Description of the security update for SharePoint Enterprise Server 2013: July 14, 2020
None None...
Description of the security update for SharePoint Enterprise Server 2013: July 14, 2020
None None...
Description of the security update for SharePoint Server 2010: July 14, 2020
Description of the security update for SharePoint Server 2010: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the followi...
End of support for Office 2010
End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...
Description of the security update for SharePoint Server 2010 Office Web Apps: July 14, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...
Description of the security update for Word 2013: July 14, 2020
Description of the security update for Word 2013: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following Microsoft...
Description of the security update for SharePoint Foundation 2013: July 14, 2020
Description of the security update for SharePoint Foundation 2013: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020
None None...
Description of the security update for Outlook 2013: July 14, 2020
Description of the security update for Outlook 2013: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office Web Apps Server 2013: July 14, 2020
None None...
Description of the security update for Outlook 2010: July 14, 2020
Description of the security update for Outlook 2010: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for SharePoint Server 2010: July 14, 2020
Description of the security update for SharePoint Server 2010: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the followi...
Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020
None None...
SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:1685-1)
This update for java-180-ibm fixes the following issues : java-180-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 bsc1172277,bsc1169511,bsc1160968 CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial denial of service CVE-2020-2754: Forward...
ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives
An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats...
RHEL 7 : ruby (RHSA-2020:2839)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2839 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks...
Security Bulletin: Cross site Scripting (Reflected) vulnerability in IBM Operations Analytics - Log Analysis
Summary Input fields accept some HTML special tags as part of input which can be used subsequently to send/include malicious request by external user to steal sensitive information from the applicaiton. Vulnerability Details Third Party Entry: PSIRT-ADV0022528 DESCRIPTION: Created from Advisory:...
Security Bulletin: Content Spoofing vulnerability in IBM Operations Analytics - Log Analysis
Summary Content spoofing is an attack where an attacker place his/her text content in a legitimate page and misguide the legitimate application users. Vulnerability Details Third Party Entry: PSIRT-ADV0022524 DESCRIPTION: Created from Advisory: ADV0022524 CVSS Base score: 4.3 CVSS Vector:...
Security Bulletin: Vulnerability in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2020-4303, CVE-2020-4304)
Summary There is a cross-site scripting vulnerability in the OAuth, OpenID Connect and SAML features. This has been addressed. Vulnerability Details CVEID: CVE-2020-4303 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This...