3091 matches found
Mitel MiVoice Connect 跨站脚本漏洞
Mitel MiVoice Connect is Mitel Canada's software for centralized management of Mitel Networks' call processing and collaboration tools. A security vulnerability exists in Mitel MiVoice Connect version 19.3 SP2 and prior versions, which originated from a vulnerability that allows an unauthenticate...
PT-2023-23996 · Mitel · Mitel Mivoice Connect
Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through 19.3 SP2 22.24.1500.0 Description: The Linux DVS server component could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control...
Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in jackson-databind ( CVE-2022-42004, CVE-2022-42003)
Summary Multiple vulnerabilities in jackson-databind used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused by a lack of a check in in the...
Security Bulletin: IBM InfoSphere Information Server is potentially vulnerable to CSV Injection (CVE-2023-22887)
Summary A CSV Injection vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-22887 DESCRIPTION: IBM InfoSphere Information Server is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused ...
Security Bulletin: IBM InfoSphere Information Server is vulnerable due to insecure storage of sensitive information (CVE-2023-22878)
Summary A vulnerability due to insecure storage of sensitive information was addressed in InfoSphere Information Server. Vulnerability Details CVEID:CVE-2023-22878 DESCRIPTION: IBM InfoSphere Information Server stores user credentials in plain clear text which can be read by a local user. CVSS Ba...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to SQL injection (CVE-2022-47984)
Summary A SQL injection vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-47984 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the...
Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in JXPath (CVE-2022-40161)
Summary IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in JXPath. The CVE is addressed. Vulnerability Details CVEID:CVE-2022-40161 DESCRIPTION: JXPath is vulnerable to a denial of service, caused by a stack-based buffer overflow...
PT-2023-23858 · Trend Micro · Trend Micro Mobile Security
Name of the Vulnerable Software and Affected Versions: Trend Micro Mobile Security Enterprise version 9.8 SP5 Description: The issue allows a remote attacker to execute arbitrary code on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged...
Microsoft Word 2013 Service Pack 1 Remote Code Execution Vulnerability (KB5002365)
This host is missing a critical security update according to Microsoft KB5002365 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
End of support for Office 2013
End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...
Microsoft Windows Win32K 安全漏洞
Microsoft Windows Win32k is a system file for Windows multi-user administration from Microsoft USA. A security vulnerability exists in Microsoft Windows Win32K. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607...
May 2, 2023, update for PowerPoint 2013 (KB4504725)
May 2, 2023, update for PowerPoint 2013 KB4504725 This article describes update 4504725 for Microsoft PowerPoint 2013 that was released on May 2, 2023. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...
EyouCms 跨站脚本漏洞
EyouCms is an open source content management system CMS based on ThinkPHP. A cross-site scripting vulnerability exists in EyouCms version V1.6.1-UTF8-sp1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...
Microsoft Windows Multiple Vulnerabilities (KB5025279)
This host is missing an important security update according to Microsoft KB5025279 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
April 11, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002381)
None None...
Description of the security update for Publisher 2013: April 11, 2023 (KB5002213)
Description of the security update for Publisher 2013: April 11, 2023 KB5002213 Summary This security update resolves a Microsoft Publisher remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and...
Microsoft Publisher 安全漏洞
Microsoft Publisher is an entry-level desktop publishing application from Microsoft USA that provides more control over page elements than Microsoft Word. A security vulnerability exists in Microsoft Office Publisher. The following products and editions are affected: Microsoft Publisher 2016 32-b...
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB5002348)
This host is missing an important security update according to Microsoft KB5002348 Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Description of the security update for SharePoint Foundation 2013: March 14, 2023 (KB5002367)
Description of the security update for SharePoint Foundation 2013: March 14, 2023 KB5002367 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23395...