2490 matches found
Description of the security update for Project 2016: August 8, 2023 (KB5002328)
None None...
End of support for Office 2016 and Office 2019
None None...
Description of the security update for Publisher 2013: August 8, 2023 (KB5002391)
Description of the security update for Publisher 2013: August 8, 2023 KB5002391 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply th...
Description of the security update for Visio 2016: August 8, 2023 (KB5002418)
None None...
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure...
Description of the security update for Office 2013: August 8, 2023 (KB5002439)
Description of the security update for Office 2013: August 8, 2023 KB5002439 Summary This security update for Microsoft Office provides defense-in-depth functionality updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: ...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, or to impersonate another user and potentially gain access gain access to sensitive data. These updates also additionally...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...
Defense-in-Depth Security Updates for Microsoft Office Products (August 2023)
The Microsoft Office Products are missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid179500; scriptversion"1.0"; scriptsetattributeattribute:"pluginmodificationdate",...
[SECURITY] [DLA 3520-1] libhtmlcleaner-java security update
Debian LTS Advisory DLA-3520-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 07, 2023 https://wiki.debian.org/LTS Package : libhtmlcleaner-java Version : 2.21-5+deb10u1 CVE ID : CVE-2023-34624 A security vulnerability has been discovered in...
EulerOS Virtualization 3.0.6.6 : expat (EulerOS-SA-2023-2422)
According to the versions of the expat packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD...
Walchem Intuition 9
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Walchem Equipment: Intuition 9 Vulnerabilities: Missing Authentication for Critical Function, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...
Oracle Database Server (Jul 2023 CPU)
The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July CPU advisory. - Vulnerability in the Oracle Text LibExpat component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and...
Improper Input Validation
@openzeppelin/contracts and @openzeppelin/contracts-upgradeable are vulnerable to Improper Input Validation. If a contract uses multiproofs for verification and the merkle tree processing includes a node with value 0 at depth 1, then the contract may be insecure. Balanced trees with three or fewe...
CVE-2023-36632
The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed ...
Denial Of Services (DoS)
flexjson is vulnerable to Denial Of Services DoS. The vulnerability exists due to a lack of nesting depth checks in the library, allowing an attacker to cause an application crash by passing a maliciously crafted JSON string...
Denial Of Services (DoS)
JSON is vulnerable to Denial Of Services DoS. The vulnerability exists due to a lack of nested depth checks in Parser.java, which allows an attacker to cause an application crash by passing a maliciously crafted JSON string...
snakeyaml: Denial of Service due to missing nested depth limitation for collections
A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...
json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion)
A flaw was found in the json-smart package. This security flaw occurs when reaching a ‘‘ or ‘‘ character in the JSON input, and the code parses an array or an object, respectively. The 3PP does not have any limit to the nesting of such arrays or objects. Since nested arrays and objects are parsed...
snakeyaml: Denial of Service due to missing nested depth limitation for collections
A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...