9532 matches found
CVE-2019-9811
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...
UBUNTU-CVE-2019-9811
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...
Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerabilities (KB4464565)
This host is missing an important security update according to Microsoft KB4464565 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4462224)
This host is missing an important security update according to Microsoft KB4462224 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2013 Spoofing Vulnerability (KB4018375)
This host is missing an important security update according to Microsoft KB4018375 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4464572)
This host is missing an important security update according to Microsoft KB4464572 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4464543)
This host is missing an important security update according to Microsoft KB4464543 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Outlook 2013 Service Pack 1 Information Disclosure Vulnerability (KB4464592)
This host is missing an important security update according to Microsoft KB4464592 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 7 security and bug fix update
An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 6 and Red Hat JBoss Web Server 3.1 for RHEL 7. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
Description of the security update for SharePoint Foundation 2013: July 9, 2019
Description of the security update for SharePoint Foundation 2013: July 9, 2019 Summary This security update resolves an Authentication Bypass vulnerability that allows SAML tokens to be signed by using arbitrary symmetric keys in Windows Communication Foundation WCF and Windows Identity Foundati...
Description of the security update for SharePoint Enterprise Server 2016: July 9, 2019
None None...
Description of the security update for Outlook 2010: July 9, 2019
Description of the security update for Outlook 2010: July 9, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Exchange allows the creation of entities that have Display Names that contain non-printable characters. To learn more about the...
Description of the security update for Office 2013: July 9, 2019
Description of the security update for Office 2013: July 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Description of the security update for Outlook 2013: July 9, 2019
Description of the security update for Outlook 2013: July 9, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Exchange allows entities to be created even though they have Display Names that contain non-printable characters.. To learn more...
Description of the security update for Excel 2010: July 9, 2019
Description of the security update for Excel 2010: July 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office 2013: July 9, 2019
Description of the security update for Office 2013: July 9, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Office Javascript does not check the validity of the webpage that is making a request to Office documents. To learn more about th...
Security Bulletin: Remote code execution in WebSphere Application Server ND (CVE-2019-4279)
Summary There is a remote code execution vulnerability in WebSphere Application Server Network Deployment. Vulnerability Details CVEID: CVE-2019-4279 DESCRIPTION: IBM WebSphere Application Server ND could allow a remote attacker to execute arbitrary code on the system with a specially-crafted...
Security Bulletin: IBM Tivoli Netcool Impact Session Management - Session Fixation
Summary IBM Tivoli Netcool Impact did not implement proper Session Management. The attacker can fix the users session and lure the victim to login with the Arbitrary session he created, further results into Session hijacking. Vulnerability Details CVEID: Not Applicable DESCRIPTION: No CVE...
Security Bulletin: Security vulnerability in IBM Java SDK affect Rational Build Forge (CVE-2019-2684)
Summary IBM® SDK Java™ Technology Edition that is used by IBM Rational Build Forge has security vulnerability due to Java SE RMI component. IBM Rational Build Forge has addressed the applicable CVE. Vulnerability Details Rational Build Forge has addressed the following vulnerability: If you run...
Security Bulletin: IBM InfoSphere Information Analyzer and Information Governance Catalog is affected by an Information Disclosure vulnerability
Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Information Analyzer and Information Governance Catalog. Vulnerability Details CVEID: CVE-2019-4257 DESCRIPTION: IBM InfoSphere Information Analyzer is affected by an information disclosure vulnerability. Sensitive...