MS15-080: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and Microsoft Silverlight. These...

MS15-080: Description of the security update for the .NET Framework 4.5/4.5.1/4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 4.5/4.5.1/4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET...

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: March 8, 2016

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: March 8, 2016 View products that this article applies to. Summary This update resolves a vulnerability in the Microsoft .NET Framework. The security feature bypass exists in a .NET Framework component...

CVE-2016-5547

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network...

Alcatel Lucent Omnivista 8770 RCE Vulnerability - Active Check

Alcatel Lucent Omnivista 8770 is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS16-148: Description of the security update for Office 2010: December 13, 2016

MS16-148: Description of the security update for Office 2010: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...

MS16-148: Description of the security update for Excel 2013: December 13, 2016

MS16-148: Description of the security update for Excel 2013: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

MS16-148: Description of the security update for Publisher 2010: December 13, 2016

MS16-148: Description of the security update for Publisher 2010: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016

MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. A security vulnerability exists in t...

MS16-148: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: December 13, 2016

None None...

Microsoft Office CVE-2016-7291 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...

MS16-145: Cumulative security update for Microsoft Edge: December 13, 2016

Resolves a vulnerability in Microsoft Edge that could allow remote code execution if a user views a specially crafted webpage in Microsoft Edge.SummaryThis security update resolves multiple vulnerabilities in Microsoft Edge. The most severe of these vulnerabilities could allow remote code executi...

Rescanning Applications with RIPS

Benefits One of the most important things in modern application development is to think about security in every step of the development lifecycle. Beginning with the start of the development right up until the continued deployment of patches and features - security is important in all stages of a...

Default credentials

The trove service user in 1 Openstack deployment aka crowbar-openstack and 2 Trove Barclamp aka barclamp-trove and crowbar-barclamp-trove in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors...

Authentication flaw

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...

CVE-2016-9796

The CVE-2016-9796 issue affects Alcatel-Lucent OmniVista 8770 (versions 2.0–3.0). The root cause is an authentication bypass that allows an attacker to query GIOP interfaces over TCP port 30024 and invoke methods (AddJobSet, AddJob, ExecuteNow) to run arbitrary commands with NT AUTHORITY\SYSTEM p...

CVE-2016-9796

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...

The NTP vulnerability can be caused by Windows System trigger DoS-vulnerability warning-the black bar safety net

! The researchers published for cve-2 0 1 6-9 3 1 1 vulnerability PoC of this vulnerability can cause the NTP daemon to crash, and trigger the Windows System to denial of service. The NTP Protocol can be used by hackers to exploit. NTP is a widely used Clock synchronization Protocol, this Protoco...

[SECURITY] Fedora 25 Update: docker-1.12.3-6.git9a594b9.fc25

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

[SECURITY] Fedora 25 Update: ansible-2.2.0.0-3.fc25

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...