8157 matches found
CVE-2017-16852
shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...
UBUNTU-CVE-2017-16853
The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...
CVE-2017-16853
The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...
Berjun BOS backend management system suffers from jboss deserialization command execution vulnerability
Shanghai Bojun Software Technology Co., Ltd. is a provider of integrated solutions for the fashion industry. Bethune BOS backend management system exists jboss deserialization command execution vulnerability. The vulnerability is due to the JBOSS middleware deployment interface is not deleted,...
End of support for Office 2007
End of support for Office 2007 Support for Office 2007 ended on October 10, 2017. All of your Office 2007 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks. Upgrade to a newer version of Office so you can stay up to date with all...
Description of the security update for Excel 2007: November 14, 2017
Description of the security update for Excel 2007: November 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see Microsoft...
Description of the security update for Word 2013: November 14, 2017
Description of the security update for Word 2013: November 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: November 14, 2017
None None...
Description of the security update for Office 2010: November 14, 2017
Description of the security update for Office 2010: November 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To learn more about the vulnerability, go to...
Description of the security update for the Windows EOT font engine information disclosure vulnerability in Windows Server 2008: November 14, 2017
Description of the security update for the Windows EOT font engine information disclosure vulnerability in Windows Server 2008: November 14, 2017 Summary An information disclosure vulnerability exists in the way that the Microsoft Windows Embedded OpenType EOT font engine parses specially crafted...
Security update for Adobe Flash Player: November 14, 2017
None None...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: November 14, 2017
None None...
Description of the security update for Office Web Apps Server 2013: November 14, 2017
None None...
Description of the security update for Word Viewer: November 14, 2017
None None...
Description of the security update for 2007 Microsoft Office Suite: November 28, 2017
None None...
Description of the security update for Office Online Server: November 28, 2017
None None...
CVE-2017-14390: CF-deployment 0.35.0 syslog misconfiguration | Cloud Foundry
Severity Medium Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions cf-deployment v0.35.0 Description A misconfiguration with Loggregator and syslog-drain in cf-deployment causes logs to be drained to unintended locations. Mitigation Users of affected versions should appl...
Microsoft Releases November 2017 Security Updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review Microsoft's November 2017 Security Update Summary and...