CVE-2017-8742: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft...

CVE-2017-8632: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office...

Microsoft Office Compatibility Pack Service Pack 3 Multiple Vulnerabilities (KB4011064)

This host is missing an important security update according to Microsoft KB4011064 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Update for Microsoft Office Compatibility Pack Service Pack 3 (KB3213644)

A security vulnerability exists in Microsoft Office Compatibility Pack Service Pack 3 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: September 12, 2017 (KB3213644)

None None...

PT-2017-2960 · Microsoft · Office Web Apps +6

Name of the Vulnerable Software and Affected Versions: Microsoft Office Web Apps versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft SharePoint Server versions affected versions not specified Microsoft Office Compatibility Pack versions...

PT-2017-2959 · Microsoft · Excel For Mac +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel for Mac affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Compatibility...

PT-2017-3194

Name of the Vulnerable Software and Affected Versions OpenMRS Reference Application versions prior to 2.6.1 Reporting Compatibility Add On versions prior to 2.0.4 Description The issue is related to the lack of authentication when deserializing XML input into ReportSchema objects. This allows...

Security Updates for Microsoft Office Compatibility Pack SP3 (September 2017)

Microsoft Office Compatibility Pack SP3 is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the...

PT-2017-18504

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint 2007 Service Pack 3 Microsoft PowerPoint 2010 Service Pack 2 Microsoft PowerPoint 2013 Service Pack 1 Microsoft PowerPoint 2013 RT Service Pack 1 Microsoft PowerPoint 2016 Microsoft PowerPoint Viewer 2007 Microsoft...

Apache Ranger Compatibility Policy

The vulnerability of the compatibility policy implementation mechanism in the Apache Ranger software platform arises from the disregard of symbols located after the "" symbol. Exploiting this vulnerability can allow a remote attacker to cause unpredictable behavior in the program...

Important: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

SUSE-SU-2017:2350-1 Security update for python-pycrypto

This update for python-pycrypto fixes the following issues: - CVE-2013-7459: Fixed a potential heap buffer overflow in ALGnew bsc1017420. python-paramiko was adjusted to work together with this python-pycrypto change. bsc1047666...

PT-2017-18647

Name of the Vulnerable Software and Affected Versions HPE Operations Orchestration versions prior to 10.80 Description The issue is related to input validation, allowing for remote code execution due to deserialization of untrusted data. This affects the backwards compatibility and central-remoti...

PT-2018-6734

Name of the Vulnerable Software and Affected Versions: zsh versions prior to 5.4 Description: The issue occurs in sh compatibility mode when processing the cd command without an argument if the HOME variable is not set, resulting in a NULL pointer dereference. Recommendations: For versions prior ...

SUSE-SU-2017:2315-1 Security update for libreoffice

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer: - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc: - New...

CentOS 7 : mariadb (CESA-2017:2192)

An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Upgrading to Citrix Receiver for Windows

Beginning August 2018, Citrix Receiver has been replaced by Citrix Workspace app. While you can still download older versions of Citrix Receiver, new features and enhancements will be released for Citrix Workspace App. ​​​​​​​ Citrix Receiver for Windows has evolved to meet the platform and user...

Fedora 26 : glibc (2017-92f8958310)

This update improves compatibility with legacy 32-bit i386 applications RHBZ1471427 and addresses a minor security vulnerability in the DNS stub resolver CVE-2017-12132. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

SUSE SLED12 Security Update : puppet (SUSE-SU-2017:2113-1)

This update for puppet fixes the following issues: Security issue fixed : - CVE-2017-2295: Possible code execution vulnerability where an attacker could force YAML deserialization in an unsafe manner. In default, this update breaks a backwards compatibility with Puppet agents older than 3.2.2 as...