PT-2020-14630 · Siemens · Siveillance Video Client

Name of the Vulnerable Software and Affected Versions: Siveillance Video Client All versions Description: A vulnerability has been identified where the client application transmits usernames to the server in cleartext when Windows NTLM authentication is enabled. This could allow an attacker in a...

June 9, 2020—KB4561649 (OS Build 10240.18608)

None None...

June 9, 2020—KB4561621 (OS Build 17134.1550)

None None...

March 10, 2020—KB4541510 (Monthly Rollup)

None None...

March 10, 2020—KB4541504 (Security-only update)

None None...

March 10, 2020—KB4538461 (OS Build 17763.1098)

None None...

CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka ‘Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability’. Recent assessments: wvu-r7 at February 18, 2020 6:51pm UTC reported: Although the...

CVE-2019-17336

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data...

September 10, 2019—KB4516033 (Security-only update)

None None...

October 8, 2019—KB4520003 (Security-only update)

None None...

October 8, 2019—KB4520005 (Monthly Rollup)

None None...

October 8, 2019—KB4520011 (OS Build 10240.18368)

None None...

The vulnerability in the implementation of the NTLM protocol in Windows operating systems arises from insufficient authentication checks for NTLM packets during their processing. This allows attackers to compromise the security functions of the NTLM MIC (Message Integrity Check) mechanism.

The vulnerability in the implementation of the NTLM protocol in Windows operating systems is related to insufficient authentication checks for NTLM packets during their processing. Exploiting this vulnerability allows an attacker to compromise the security functions of the NTLM Message Integrity...

Vulnerabilities of Windows operating systems, related to authentication deficiencies, allow attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

CVE-2019-1322

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340...

September 10, 2019—KB4515384 (OS Build 18362.356)

None None...

September 10, 2019—KB4516051 (Security-only update)

None None...

September 10, 2019—KB4516070 (OS Build 10240.18333)

None None...

June 11, 2019—KB4503293 (OS Build 18362.175)

None None...

NTLM type-2 out-of-bounds buffer read

libcurl contains a heap buffer out-of-bounds read flaw. The function handling incoming NTLM type-2 messages lib/vauth/ntlm.c:ntlmdecodetype2target does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server...