Description of the security update for SharePoint Foundation 2013: November 12, 2019

Description of the security update for SharePoint Foundation 2013: November 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists in Microsoft SharePoint if an attacker uploads a specially crafted file to the SharePoint Server. To learn more about the...

ZOHO ManageEngine EventLog Analyzer Access Control Error Vulnerability

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. The software is capable of network-wide hosts, servers, network equipment and a variety of application service systems and other logs generated by the comprehensive collecti...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-02180)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows 7 SP1, Windows Server...

CVE-2019-18335

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an...

CVE-2019-18319

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...

CVE-2019-18286

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have...

Microsoft Windows Remote Desktop Protocol Information Disclosure Vulnerability

Microsoft Windows XP is a suite of operating systems for use with PCs and tablets from Microsoft Corporation USA.Remote Desktop Protocol is a remote desktop protocol. An information disclosure vulnerability exists in Remote Desktop Protocol in the SP3 version of Microsoft Windows XP, which arises...

Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4484186)

This host is missing an important security update according to Microsoft KB4484186 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft PowerPoint 2010 Service Pack 2 RCE Vulnerability (KB4461613)

This host is missing an important security update according to Microsoft KB4461613 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Information Disclosure Vulnerability (KB4484192)

This host is missing an important security update according to Microsoft KB4484192 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Information Disclosure Vulnerability (KB4484190)

This host is missing an important security update according to Microsoft KB4484190 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2010 Service Pack 2 Information Disclosure Vulnerability (KB4484196)

This host is missing an important security update according to Microsoft KB4484196 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Description of the security update for Office 2010: December 10, 2019

Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...

Description of the security update for Office 2010: December 10, 2019

Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...

Description of the security update for Excel 2013: December 10, 2019

Description of the security update for Excel 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel imcorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...

Description of the security update for PowerPoint 2010: December 10, 2019

Description of the security update for PowerPoint 2010: December 10, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft PowerPoint software if the software does not correctly handle objects in memory. To learn more about the vulnerability, se...

December 10, 2019—KB4530734 (Monthly Rollup)

None None...

Security Bulletin: IBM InfoSphere Information Analyzer is affected by an AngularJS client-side template injection vulnerability

Summary An AngularJS client-side template injection vulnerability was addressed by IBM InfoSphere Information Analyzer. Vulnerability Details CVEID: CVE-2019-4660DESCRIPTION: It is possible to inject AngularJS template syntax in an internal page request within Information Analyzer, which is...

A list of the bugs that are fixed in SQL Server 2005 Service Pack 2

Lists the bugs that are fixed in SQL Server 2005 Service Pack 2.If you have a problem installing Microsoft SQL Server 2005 Express Edition SP2, you can try one of the following solutions:To find more information about the error code, or to request support by e-mail, visit the following Microsoft...

HPSBHF03642 rev. 2 - HP ThinPro Linux Information Disclosure and Privilege Escalation

Potential Security Impact Information Disclosure, Privilege Escalation, and Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported by: Eldar Marcussen - xen1thLabs - Software Labs PSR-2019-0173, CVE-2019-16285, CVE-2019-16286, CVE-2019-16287, CVE-2019-18909,...