April 14, 2020—KB4549951 (OS Builds 18362.778 and 18363.778) - EXPIRED

April 14, 2020—KB4549951 OS Builds 18362.778 and 18363.778 - EXPIRED Applies To Windows 10, version 1903, all editions Windows Server version 1903 Windows 10, version 1909, all editions Windows Server version 1909 Note NEW 8/5/21 EXPIRATION NOTICE IMPORTANT As of 8/5/2021, this KB is no longer...

Description of the security update for Office 2016: June 9, 2020

Description of the security update for Office 2016: June 9, 2020 Applies To Office Professional Plus 2016 Office Professional 2016 Office Standard 2016 Office Home and Business 2016 Office Home and Student 2016 Summary This update resolves a security feature bypass vulnerability that exists if...

Security update for axel (moderate)

openSUSE Security Update: Security update for axel Announcement ID: openSUSE-SU-2020:0778-1 Rating: moderate References: 1172159 Cross-References: CVE-2020-13614 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for axel fixes...

Veeam Backup for Microsoft 365 Modern App-Only Authentication Limitations

Information Veeam Backup for Microsoft 365 v8 and higher Due to Microsoft's deprecation of Basic Authentication, the only option available when adding a new Microsoft 365 organization to Veeam Backup for Microsoft 365 v8 is Modern App-Only Authentication. Veeam Backup for Microsoft 365 v7 and v7a...

Cisco Adaptive Security Appliance Software Lightweight Directory Access Protocol Denial of Service Vulnerability (cisco-sa-20190501-asa-ftds-ldapdos)

According to its self-reported version, the Cisco ASA device is affected by a vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated,...

Ruby BasicSocket recv_nonblock read_nonblock Unauthorized Access

The vulnerability of the BasicSocketrecvnonblock and BasicSocketreadnonblock functions in the Ruby programming language is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 2 (7.5.1-736)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 1 provides a stability and usability bug fix. All customers that use CloudBlue Cloud Infrastructure Automation with Virtuozzo Hybrid Server 7.5 and newer are strongly recommended to install the hotfix. Vulnerability id: PSBM-125586 Cloud...

PT-2020-3697

Name of the Vulnerable Software and Affected Versions NPort IAW5000A-I/O Series affected versions not specified Description The issue is related to the implementation of the Basic HTTP Authentication method in the NPort IAW5000A-I/O Series web server software, which involves the transmission of...

PT-2020-5200

Name of the Vulnerable Software and Affected Versions CmtViewer affected versions not specified Description The issue is related to the lack of protection for transmitted data in the CmtViewer application's basic HTTP authorization method. This could allow a remote attacker to gain access to the...

CVE-2020-1058

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093...

VBScript Script Handler Code Execution

The vulnerability of VBScript script handlers in Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability (CNVD-2020-51780)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles memory objects in Microsof...

May 12, 2020—KB4556826 (OS Build 10240.18575)

May 12, 2020—KB4556826 OS Build 10240.18575 Applies To Windows 10 Note For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article. Highlights Updates to improve security when using Internet...

PT-2020-6331

Name of the Vulnerable Software and Affected Versions Vijeo Designer Basic versions V1.1 HotFix 16 and prior Vijeo Designer versions V6.2 SP9 and prior Description The issue is related to the use of hard-coded credentials. Exploitation of this issue may allow a remote attacker to gain unauthorize...

CVE-2019-19514

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID...

PT-2020-10176

Name of the Vulnerable Software and Affected Versions Ayision Ays-WR01 version v28K.RPT.20161224 Description The issue allows stored XSS in basic repeater settings via an SSID. This means that an attacker can inject malicious code into the device's settings, potentially leading to unauthorized...

CVE-2019-19514: Improper Neutralization of Input During Web Page Generation

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID...

ALPINE-CVE-2020-10933

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

Schneider Electric EcoStruxure Machine Expert-Basic or SoMachine Basic Injection Vulnerability

Schneider Electric EcoStruxure Machine Expert-Basic and SoMachine Basic are both products of Schneider Electric, France.Schneider Electric EcoStruxure Machine Expert-Basic is a PLC configuration application. The program is mainly used for programmable logic controller configuration, programming a...

CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...