Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 2 (7.5.3-407)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 3 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-140018 Unable to set an IP address to containers based on the vzlinux-stream-9-x8664 and centos-stream-9-x8664 templates. Vulnerability id: PSBM-140305...

PT-2021-21739 · Nextcloud · Nextcloud Desktop Client

Name of the Vulnerable Software and Affected Versions: Nextcloud Desktop Client versions 3.0.3 through 3.2.4 Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. The Client invokes its uninstaller script when being installed to ensure no...

CVE-2020-35145

Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue...

CVE-2020-35145

CVE-2020-35145 affects Acronis True Image for Windows prior to 2021 Update 3, with a DLL hijacking (Untrusted Search Path) local privilege escalation in multiple components. Root cause: untrusted search path; impact: local privilege escalation. Affected versions are prior to 2021 Update 3. Mitiga...

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: August 14, 2018

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: August 14, 2018 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Notice In November 2020, the content of this article was updated to clarify the affected products...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Notices In November 2020, the content of this article was updated to clarify the...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Notice In November 2020, the content of this article was updated to clarify the affected...

KLA11685 Spoofing vulnerability in Microsoft Exchange Server

A spoofing vulnerability was found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-0903 Related products Microsoft-Exchange-Server CVE list CVE-2020-0903 warning KB list 4540123 Solution Install necessary updates...

Release Information for Veeam Availability for Nutanix AHV 1.0 Update 3

Challenge Release Notes for Veeam Availability for Nutanix AHV 1.0 Update 3. This update supersedes Veeam Availability for Nutanix AHV 1.0 Update 2. Solution Veeam Availability for Nutanix AHV 1.0 Update 3 includes improvements and fixes for series of issues. The most critical ones are listed...

Product update: Virtuozzo Infrastructure Platform 3.0 Update 3 (3.0.3-16)

This update provides fixes and improvements. Vulnerability id: VSTOR-25522 SNMP snmpd.conf should not be replaced after the update. Vulnerability id: VSTOR-25600 S3 Uploading a binary file could fail in some cases. Vulnerability id: VSTOR-26405 WebCP Added support for ED25519 SSH keys...

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: July 9, 2019

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3: July 9, 2019 Applies to: All Visual Studio 2015 Update 3 SKUs except for Isolated and Integrated Shells and Build Tools Notice In November 2020, the content of this article wa...

Deserialization of untrusted data

ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7839

ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: May 14, 2019

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: May 14, 2019 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Notice In November 2020, the content of this article was updated to clarify the affected...

CVE-2018-18093

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access...

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: December 11, 2018

Description of the security update for the elevation of privilege vulnerability in Visual Studio 2015 Update 3: December 11, 2018 Applies to: All Visual Studio 2015 Update 3 editions except Build Tools Notice In November 2020, the content of this article was updated to clarify the affected...

Intel® VTune Amplifier 2018 for Windows* Update 3 Advisoy

Summary: A potential security vulnerability in Intel® VTune Amplifier 2018 for Windows may allow Escalation of Privilege. Intel is releasing VTune Amplifier updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-18093 Description: Improper file permissions in the...

CVE-2018-12174

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...

Heap overflow

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...

CVE-2018-12174

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...