Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019

Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operatin...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2019:2710-1 Rating: moderate References: 1117665 1139073 Cross-References: CVE-2018-12207 CVE-2019-11135 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now...

CVE-2019-18898

UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...

FTP Navigator 8.03 - Custom Command Denial of Service (SEH)

FTP Navigator 8.03 - Custom Command Denial of Service SEH Exploit Title: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Date: 2019-12-18 Exploit Author: Chris Inzinga Vendor Homepage: http://www.internet-soft.com/ Software Link:...

FTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)

Exploit Title: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Date: 2019-12-18 Exploit Author: Chris Inzinga Vendor Homepage: http://www.internet-soft.com/ Software Link: https://www.softpedia.com/dyn-postdownload.php/5edd515b8045f156a9dd48599c2539e5/5dfa4560/d0c/0/1 Version: 8.03...

SurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service (SEH)

Exploit Title: SurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service SEH Date: 2019-12-18 Exploit Author: Chris Inzinga Vendor Homepage: http://www.bimesoft.com/ Software Link: https://www.softpedia.com/get/Internet/Offline-Browsers/SurfOffline.shtml Version: 2.2.0.103 Tested on:...

OPENSUSE-SU-2019:2689-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution bsc1158095. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Microsoft Windows Media Player Information Disclosure Vulnerability (CNVD-2019-45916)

Microsoft Windows 7 SP1 and others are a series of operating systems released by Microsoft.Windows Media Player is one of these media players. An information disclosure vulnerability exists in Windows Media Player in Microsoft Windows 7 SP1, which can be exploited by an attacker to read data by...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2019:2672-1 Rating: moderate References: 1093414 1150734 1157198 Cross-References: CVE-2019-3688 CVE-2019-3690 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata ...

SpotAuditor 5.3.2 - Base64 Local Buffer Overflow (SEH) Exploit

Exploit Title: SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow SEH Exploit Author: Kirill Nikolaev Vulnerable Software: SpotAuditor Vendor Homepage: http://www.nsauditor.com/ Version: 5.3.2 Software Link: http://spotauditor.nsauditor.com/downloads/spotauditorsetup.exe Tested Windows 7 SP1 x86...

SpotAuditor 5.3.2 Local Buffer Overflow

Exploit Title: SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow SEH Exploit Author: Kirill Nikolaev Date: 2019-12-06 Vulnerable Software: SpotAuditor Vendor Homepage: http://www.nsauditor.com/ Version: 5.3.2 Software Link: http://spotauditor.nsauditor.com/downloads/spotauditorsetup.exe Tested...

openSUSE Security Update : cloud-init (openSUSE-2019-2633)

This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed : - Short circuit the conditional for identifying the sysconfig renderer...

Security update for cloud-init (moderate)

openSUSE Security Update: Security update for cloud-init Announcement ID: openSUSE-SU-2019:2633-1 Rating: moderate References: 1099358 1129124 1136440 1142988 1144363 1151488 1154092 Cross-References: CVE-2019-0816 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and...

openSUSE Security Update : freerdp (openSUSE-2019-2608)

This update for freerdp fixes the following issues : - CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. - CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. This update was imported from the SUSE:SLE-15-SP1:Update update project. ...

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Server 2008 R2 SP1 (KB4533095)

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Server 2008 R2 SP1 KB4533095 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2631-1 Rating: important References: 1157004 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following...

NCP Secure Entry Client 9.2 - Unquoted Service Paths Vulnerability

Exploit Title: NCPSecureEntryClient 9.2 - Unquoted Service Paths Exploit Author: Akif Mohamed Ik Vendor Homepage: http://software.ncp-e.com/ Software Link: http://software.ncp-e.com/NCPSecureEntryClient/Windows/9.2x/ Version: 9.2x Tested on: Windows 7 SP1 CVE : NA C:\Users\userwmic service get...

NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths

NCPSecureEntryClient 9.2 - Unquoted Service Paths Exploit Title: NCPSecureEntryClient 9.2 - Unquoted Service Paths Date: 2019-11-17 Exploit Author: Akif Mohamed Ik Vendor Homepage: http://software.ncp-e.com/ Software Link: http://software.ncp-e.com/NCPSecureEntryClient/Windows/9.2x/ Version: 9.2x...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2528-1 Rating: important References: 1139073 1141035 1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one erra...

openSUSE Security Update : apache2-mod_auth_openidc (openSUSE-2019-2499)

This update for apache2-modauthopenidc fixes the following issues : - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes bsc1153666. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text a...