8157 matches found
Microsoft Windows AppX Deployment Service Link Resolution Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...
Exploit for CVE-2020-7931
CVE-2020-7931: SSTI exploitation in Artifactory Pro ============...
Moderate: Red Hat Bug Fix Advisory: Ansible 2.9.6 release for Ansible Engine 2.9
Ansible 2.9.6 release for Ansible Engine 2.9 Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4475606) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4484150) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for Office Online Server: March 10, 2020
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...
Description of the security update for Microsoft Dynamics NAV 2015: March 10, 2020
None None...
Description of the security update for SharePoint Foundation 2013: March 10, 2020
Description of the security update for SharePoint Foundation 2013: March 10, 2020 Summary This security update resolves a vulnerability that occurs if SharePoint Server does not correctly sanitize a specially crafted request to an affected SharePoint server. To learn more about the vulnerability,...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Description of the security update for SharePoint Server 2010: March 10, 2020
Description of the security update for SharePoint Server 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for Office 2010: March 10, 2020
Description of the security update for Office 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...
USN-4292-1: rsync vulnerabilities | Cloud Foundry
Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that rsync incorrectly handled pointer arithmetic in zlib. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly...
Rockwell Automation MicroLogix Controllers and RSLogix 500 Software
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: MicroLogix 1400 Controllers, MicroLogix 1100 Controllers, and RSLogix 500 Software Vulnerabilities: Use of Hard-coded Cryptographic Key, Use of a Broken or Risky...
USN-4293-1: libarchive vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to access sensitive information. CVE-2019-19221 It was...
USN-4295-1: Rake vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands. CVEs contained in this USN include: CVE-2020-8130. Affected Cloud...
CloudBees Jenkins BMC Release Package and Deployment Plugin Code Execution Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...
Citrix Gateway Cache Overflow Vulnerability
Citrix Gateway is a customer-managed solution that can be deployed locally or on any public cloud, such as AWS, Azure or Google Cloud Platform. Citrix Gateway has a security vulnerability. An attacker can exploit the vulnerability to cache poisoning...
Citrix Gateway Information Disclosure Vulnerability
Citrix Gateway is a customer-managed solution that can be deployed locally or on any public cloud, such as AWS, Azure or Google Cloud Platform. An information disclosure vulnerability exists in Citrix Gateway. An attacker could exploit the vulnerability to expose information via the cache...