Avaya产品WEB管理接口输入验证漏洞

BUGTRAQ ID: 29939,29938 Avaya是一家提供IP通信以及面向企业的通信网络设计、建造、部署和管理的厂商。 Avaya的Communication Manager、Message Storage Server和Avaya SIP Enablement Services 产品的WEB管理接口存在输入验证错误，如果远程攻击者向上述产品的WEB管理接口提交了恶意请求的话，就可能导致读取敏感信息或执行任意指令。 0 AVAYA Communication Manager 4.x AVAYA Communication Manager 3.1.x AVAYA SIP...

Avaya Communication Manager存在多个安全漏洞

BUGTRAQ ID: 29939 CNCAN ID：CNCAN-2008062702 Avaya Communication Manager是一款IP语音通信解决方案。 Avaya Communication Manager WEB管理接口存在多个安全问题，远程攻击者可以利用漏洞执行任意代码，提升特权，获得敏感信息等攻击。 -配置数据查看或恢复信任凭证时存在问题可导致提升特权。 -配置本地数据查看和恢复参数时可导致以登录用户进程权限执行系统命令。 -配置存在问题可导致系统信息恢复，包括加密密码信息。 -无需验证从对象文件夹中执行脚本。 -无需验证可执行不需要的默认应用程序。...

Visual Studio 2026 Security Update (18.3.3)

This security update applies to all editions of Visual Studio 2026, and will update client machines on the Stable channel to version 18.3.3. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...

21H2 Enablement KB Prerequisite

21H2 Enablement KB Prerequisite...

21H1 Enablement KB Prerequisite

21H1 Enablement KB Prerequisite...

Visual Studio 2022 Security Update (17.14.30)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the Current channel to version 17.14.30. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the upda...

20H2 Enablement KB Prerequisite

20H2 Enablement KB Prerequisite...

Visual Studio 2022 Security Update (17.12.17)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.12.17. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...

19H2 Enablement KB Prerequisite

19H2 Enablement KB Prerequisite...

Visual Studio 2022 Security Update (17.14.32)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the Current channel to version 17.14.32. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the upda...

Visual Studio 2026 Security Update (18.4.4)

This security update applies to all editions of Visual Studio 2026, and will update client machines on the Stable channel to version 18.4.4. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...