November 11, 2014 update for PowerPoint 2007 (KB2597972)

November 11, 2014 update for PowerPoint 2007 KB2597972 This article describes update KB2597972 for Microsoft PowerPoint 2007 that was released on November 11, 2014. This update improves the user experience in Office 2010 for when you use OLE objects in an Office 2010 application. How to download...

You can't open the "Devices" menu in PC Settings in Windows 8.1 or Windows Server 2012 R2

You can't open the "Devices" menu in PC Settings in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs when you try to open the Devices menu in PC Settings in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this issue. Before yo...

Updated e2fsprogs packages fix security vulnerability

Updated e2fsprogs packages fix security vulnerability: A code execution vulnerability in the directory rehashing functionality CVE-2019-5188. For other fixes in this update, see the referenced release info...

Google Chrome < 70.0.3538.67 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 70.0.3538.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 201810stable-channel-update-for-desktop advisory. - Use after free in HTMLImportsController in Blink in Google Chrome prior to...

Kados R10 GreenBee - 'release_id' SQL Injection

Exploit Title: Kados R10 GreenBee - 'releaseid' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.kados.info/ Software Link: https://sourceforge.net/projects/kados/ Version: R10 GreenBee Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

SUSE-SU-2018:2641-1 Security update for enigmail

This update for enigmail to 2.0.8 fixes the following issues: The enigmail 2.0.8 release addresses a security issue and solves a few regression bugs. A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed...

Solaris 10 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

UPDATE: Kali Linux 2017.2 Release

PenTestIT RSS Feed About five months ago, I wrote about Kali Linux 2017.1. We now have an update - Kali Linux 2017.2, which is a roll-up of all updates since the last release. In addition to all of the standard security and package updates that are submitted via Debian Testing, this release also...

PT-2017-17351

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.1.8 Roundcube versions 1.2.x prior to 1.2.4 Description The issue allows for a cross-site scripting attack via a crafted Cascading Style Sheets CSS token sequence within an SVG element in the rcube utils.php file...

Microsoft Windows OLE Remote Code Execution Vulnerability (3146706)

This host is missing an important security update according to Microsoft Bulletin MS16-044. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Flash Player issue where iframe contents may be overwritten

Overview Adobe Flash Player contains an issue where the same-origin policy may be bypassed leading to iframe contents being overwritten. Tokuji Akamine reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact...

December 2015 Security Update Release Summary

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security...

JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (Install)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation...

Fedora 22 : drupal7-webform-4.7-1.fc22 (2015-5022)

Update to 4.7 - Release notes can be found at https://www.drupal.org/node/2460229 - Security fix for drupal7-webform module - Upstream release notes: https://www.drupal.org/node/2457219 - Release notes can be found at https://www.drupal.org/node/2454063 Note that Tenable Network Security has...

Sun Java System Web Server 6.1/7.0 Digest Authentication Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37896/info Sun Java System Web Server is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Oracle Linux Update Release

The remote host is running a release of Oracle Linux that is not at the latest update release or minor release. Since updating Oracle Linux to the latest update release provides a host with the most recent updates, this means that it has not been updated recently and is likely to be affected by...

Description of the Office Web Apps Server update: April 9, 2013 (KB2738048)

None None...

Fedora 15 : glibc-2.14.1-5 (2012-0018)

Revert change from -6 which filtered out GLIBCPRIVATE symbols. Not appropriate for an update release. Check values from TZ file header 767696 Convert tzdata-update to lua 743034 Mark clone as .cantunwind 749556 Update to 2.24.1 release Correctly reparse group line after enlarging the buffer 73936...

ImpressPages CMS 1.0.12 Code Execution

======= Summary ======= Name: Remote code execution in ImpressPages CMS Release Date: 5 January 2012 Reference: NGS00109 Discoverer: David Middlehurst Vendor: ImpressPages Vendor Reference: Systems Affected: ImpressPages CMS 1.0.12 Risk: High Status: Published ======== TimeLine ======== Discovere...

Paessler PRTG Traffic Grapher 6.2.1.945 Cross Site Scripting

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 08-Jun-2010 Software: Paessler - PRTG Traffic Grapher http://www.paessler.com "PRTG Network Monitor runs 24/7 on a Windows-based machine within your network, recording network usage parameters...