8157 matches found
CVE-2010-0109
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...
CVE-2010-0109
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...
CVE-2010-0109
CVE-2010-0109 affects Symantec/Altiris Deployment Solution 6.9.x prior to DS 6.9 SP4. The DBManager component can crash via a crafted CreateSession or PXEManagerSignOn request, yielding a remote DoS. Exploitation potential is described as remote and network-adjacent, with impact on availability (...
Security Update for Microsoft Project Server 2013 (KB4011701) farm-deployment
A security vulnerability exists in Microsoft Project Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for Word Viewer: February 13, 2018
None None...
Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary Vulnerabilities exist in the way that the Windows Kernel handles objects in memory. To learn more about the vulnerabilities, go to the following...
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018 Summary A remote code execution vulnerability exists in StructuredQuery when the software fails to properly handle objects in memory. To learn more about the...
Description of the security update for the Windows Kernel vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the Windows Kernel vulnerability in Windows Server 2008: February 13, 2018 Summary An information disclosure vulnerability and an elevation of privilege vulnerability exist when the Windows kernel improperly handles objects in memory. To learn more about the...
Description of the security update for the Windows Common Log file system driver elevation of privilege vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the Windows Common Log file system driver elevation of privilege vulnerability in Windows Server 2008: February 13, 2018 Summary An elevation of privilege vulnerability exist when the Windows Common Log File System CLFS driver improperly handles objects in...
Description of the security update for the Windows Kernel information disclosure vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the Windows Kernel information disclosure vulnerability in Windows Server 2008: February 13, 2018 Summary An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. To learn more about the vulnerability, go t...
Description of the security update for Outlook 2010: February 13, 2018
Description of the security update for Outlook 2010: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: February 13, 2018
Description of the security update for Office 2010: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for the Windows remote code execution vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows remote code execution vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary A remote code execution vulnerability exists when Windows improperly handles objects in memory. To learn more about the vulnerability,...
Description of the security update for the Windows scripting engine vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows scripting engine vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attack...
Microsoft Releases February 2018 Security Updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review Microsoft's February 2018 Security Update Summary and...
Securing IT Assets By Prioritizing Protection And Remediation
As hackers get faster at weaponizing exploits for disclosed bugs, InfoSec teams need — more than ever — automated, continuous and precise IT asset inventorying, vulnerability management, threat prioritization and patch deployment. Critical vulnerabilities that linger unpatched for weeks or months...
Serverless, Low Cost, Threat Intel Aggregation: ElasticIntel
ElasticIntel is serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch. It is an alternative to expensive threat intel aggregation platforms which ingest the same data feeds you could get for free. ElasticIntel is designed to provide a central,...
Atlassian Bamboo Cross-Site Scripting Vulnerability (CNVD-2018-04560)
Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A cross-site scripting vulnerability exists in viewDeploymentVersionJiraIssuesDialog resour...
GE Medical Devices Vulnerability
OVERVIEW This advisory was originally posted to the HSIN ICS-CERT library on February 6, 2018, and is being released to the NCCIC/ICS-CERT website. Independent researcher Scott Erven submitted information regarding the potential use of default or hard-coded credentials in multiple GE Healthcare...
Cloud Migration Checklist for Application and Data Security
In the final post of our series on cloud migration, we’ve put together a list of strategic and immediate considerations as you plan to migrate your business to the cloud. From a high-altitude viewpoint, cloud security is based on a model of “shared responsibility” in which the concern for securit...