The vulnerability of the Tricon Communications Module, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Tricon Communications Module is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Fedora: Security Advisory for openssl (FEDORA-2020-da2d1ef2d7)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: Red Hat Security Advisory: evolution security and bug fix update

An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Moderate: evolution security and bug fix update

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was...

[SECURITY] Fedora 32 Update: openssl-1.1.1g-1.fc32

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Unspecified Vulnerability in JetBrains GoLand

JetBrains GoLand is a set of intelligent IDE Integrated Development Environment dedicated to Go language development from the Czech company JetBrains. A security vulnerability exists in JetBrains GoLand versions prior to 2019.3.2, which stems from the fact that the program uses the HTTP protocol...

Vulnerability Spotlight: Zoom Communications user enumeration

Video conferencing and calling software has spiked in popularity as individuals across the globe are forced to stay home due to the COVID-19 pandemic. There are a plethora of players in this space, with one or two getting increased attention. One service in particular — Zoom — has received an...

Cisco Unified Communications Manager XML External Expansion Vulnerability (cisco-sa-20191002-cucm-xxe)

According to its self-reported version, Cisco Unified Communications Manager is affected by an XML external entity XXE vulnerability. This is due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. An unauthenticated, remote attacker can exploit this,...

Cisco Unified Communications Manager Path Traversal (cisco-sa-cucm-taps-path-trav-pfsFO93r)

According to its self-reported version, Cisco Unified Communications Manager is affected by a path traversal vulnerability in the Tool for Auto-Registered Phones Support TAPS due to insufficient validation of user-supplied input to the TAPS interface of the affected device. An unauthenticated,...

OPC Foundation UA .NET Standard Code Issue Vulnerability

NET Standard is the OPC Foundation's OPC Foundation set of unified architecture standards for developing OPC UA applications. A security vulnerability exists in the handling of sessions in OPC Foundation UA.NET Standard due to a lack of proper locking when performing operations on objects. An...

Zoom Communications Registered Users Enumeration

Summary Zoom doesn’t properly validate certain XMPP requests coming from the clients, which can lead to disclosure of details about registered users. Tested Versions Zoom Service As Of April 9th 2020 Product URLs https://zoom.us CVSSv3 Score 6.5 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CWE...

Description of the update package for Office Communications Server 2007 R2, Conferencing Announcement Service: November 2010

Describes the bug that is resolved in the Office Communications Server 2007 R2, Conferencing Announcement Service hotfix package that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Conferencing Announcement Service issue that is fixed in t...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: November 2010

Describes the Office Communications Server 2007 R2, Core Components issue that is fixed in the cumulative update for Office Communications Server 2007 R2, Core Component that is dated November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Core Components...

Description of the cumulative update for Office Communications Server 2007 R2, Web Conferencing Server: March, 2011

Discusses the issues that are fixed in the March 2011 cumulative update for Office Communications Server 2007 R2, Web Conferencing Server.SummaryThis article describes the issues that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Conferencing Server that i...

Description of the cumulative update package for Office Communications Server 2007 R2, Response Group Service: September 2010

Describes the Cumulative Update for Office Communications Server 2007 R2, Response Group Service bug that is resolved in the update package that is dated September 2010.SummaryThis article describes the Cumulative Update for Microsoft Office Communications Server 2007 R2, Response Group Service...

Description of the cumulative update package for Office Communications Server 2007 R2, Communicator Web Access: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Communicator Web Access update package that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Microsoft Office Communicator Web Access that is...

Description of the update package for Communications Server 2007 R2, Web Components: March, 2011

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated March 2011.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

Description of the cumulative update for Office Communications Server 2007 R2, Conferencing Attendant: November 2010

Describes the bugs that are resolved in the cumulative update for Office Communications Server 2007 R2, Conferencing Attendant: November 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Conferencing Attendant issues that are fixed in the Office Communications...

Description of the cumulative update for Office Communications Server 2007 R2, Administration Tools: September 2010

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Administration Tools that is dated September 2010.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Administration Tools...

Description of the cumulative update for Office Communications Server 2007 R2, Web Conferencing Server: September 2011

Discusses the issues that are fixed in the September 2011 cumulative update for Office Communications Server 2007 R2, Web Conferencing Server.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Web Conferencing Server that is dated September 201...