8163 matches found
Description of the security update for Office 2016: July 9, 2019
None None...
Description of the security update for Excel 2013: July 9, 2019
Description of the security update for Excel 2013: July 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
PT-2019-2722
Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service AppXSVC affected versions not specified Description The issue is related to the improper handling of hard links by the Windows AppX Deployment Service AppXSVC, which can lead to an elevation of privilege. This c...
PT-2019-2723
Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service AppXSVC affected versions not specified Description The issue is related to the improper handling of hard links by the Windows AppX Deployment Service AppXSVC, which can lead to an elevation of privilege. This c...
Microsoft Windows AppX Deployment Service CVE-2019-1129 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain the elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Version 1803 for 32-bit...
Security Bulletin: IBM Multicloud Manager contains sensitive information upon deployment (CVE-2019-4118)
Summary The IBM Multicloud Manager ibm-mcm-chart contains sensitive information upon deployment. Vulnerability Details CVEID: CVE-2019-4118 DESCRIPTION: IBM Multicloud Manager ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment...
PT-2019-13316 · Python · Python
Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.7.17 Python versions 3.x prior to 3.5 Description: The MSI installer for Python on Windows defaults to the C:Python27 directory, making it easier for local users to deploy Trojan horse code. The vendor's position is...
NSX-T vs. NSX-V – Key Differences and Pitfalls to Avoid
Learn the difference between VMware’s segmentation offerings, NSX-T vs NSX-V, and understand the several potential pitfalls that are important to consider before deployment...
CVE-2017-8409
An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However, the device does not enforce the same restriction on a specific URL thereby allowing any attacker in possession of that to view the live video feed...
TwitterShadowBan - Twitter Shadowban Tests
One-page web app, testing Twitter users for conventional and QFD shadowbans. Setup Browser compatibility needs transpiling. Nothing fancy, just the usual babel magic. git clone https://github.com/shadowban-eu/TwitterShadowBanV2 && cd TwitterShadowBanV2 npm install Since we are using a php backend...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Collaboration and Deployment Services
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version, JRE71SR4FP15, JRE8SR5FP5, JRE8SR5FP20 and JRE8SR5FP25 used by Collaboration and Deployment Services. These issues were disclosed as part of the IBM Java SDK updates in April 2019 and January 2019. Vulnerability...
Personalized Customer Support that Garners a Personalized Thank You
In my two-plus years as a Technical Support Engineer at Imperva, I’ve handled a wide variety of customer cases. And I’ve had the satisfaction of helping resolve them quickly and successfully. But never before have I received a handwritten thank you note from an effusive customer. Let me start at...
Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update
Red Hat OpenShift Container Platform release 3.11.117 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clou...
CloudGoat 2: The New & Improved “Vulnerable by Design”AWS Deployment Tool
The post CloudGoat 2: The New & Improved “Vulnerable by Design” AWS Deployment Tool appeared first on Rhino Security Labs...
CVE-2019-11271 Bosh Deployment logs leak sensitive information
Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM API Connect
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 and IBM® Runtime Environment Java™ Version 8 used by IBM API Connect. IBM API Connect has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-11212 DESCRIPTION: libjpeg is vulnerable to a...
CVE-2019-1064
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
CVE-2019-1064
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Description of the security update for SharePoint Foundation 2013: June 11, 2019
Description of the security update for SharePoint Foundation 2013: June 11, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...