Spoofing

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...

CVE-2020-1325 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

...

CVE-2020-1325

CVE-2020-1325 affects Microsoft Azure DevOps Server and Team Foundation Server/Services, with a spoofing vulnerability in the Team Foundation/DevOps UI that can allow impersonation or UI spoofing. Affected products include Azure DevOps Server and Visual Studio/DevOps components; the issue is repo...

Security Bulletin: IBM WebSphere Application Server Network Deployment security vulnerabilities in IBM Content Foundation on Cloud

Summary IBM Content Foundation on Cloud in IBM WebSphere Application Server Network Deployment has security vulnerablities. Vulnerability Details CVEID: CVE-2020-4304 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This...

Security Bulletin: IBM WebSphere Application Server Network Deployment security vulnerability in IBM Content Foundation on Cloud

Summary IBM Content Foundation on Cloud contains a IBM WebSphere Application Server Network Deployment security vulnerability Vulnerability Details CVEID: CVE-2020-4163 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated...

Security Bulletin: WebSphere security vulnerability in IBM Content Foundation on Cloud

Summary IBM WebSphere Application Server Network Deployment security vulnerability in Content Platform Engine Container Vulnerability Details CVEID: CVE-2020-4421 DESCRIPTION: IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoo...

Security Bulletin: IBM Content Navigator logon response security vulnerability in FileNet Content Manager

Summary Security vulnerability in IBM Content Navigator logon response in FileNet Content Manager Vulnerability Details CVEID: CVE-2019-4679 DESCRIPTION: IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could be...

Description of the security update for SharePoint Foundation 2013: November 10, 2020

Description of the security update for SharePoint Foundation 2013: November 10, 2020 Notice We declare System.Web.UI.WebControls.PasswordRecovery to be an unsafe control because of security concerns. Therefore, we recommend that you no longer user it. Summary This security update resolves...

Description of the security update for SharePoint Foundation 2010: November 10, 2020

Description of the security update for SharePoint Foundation 2010: November 10, 2020 Notice We declare System.Web.UI.WebControls.PasswordRecovery to be an unsafe control because of security concerns. Therefore, we recommend that you no longer use it. Summary This security update resolves...

Azure DevOps Server and Team Foundation Services Spoofing Vulnerability

...

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

PT-2020-4827 · Microsoft · Azure Devops Server +1

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server and Team Foundation Services affected versions not specified Description: The issue is related to a spoofing vulnerability in the Team Foundation Services component of Azure DevOps Server, where the user interface can be...

PT-2020-4770 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to errors in...

PT-2020-4800 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

PT-2020-4799 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: The issue is related to insufficie...

EulerOS Virtualization 3.0.6.6 : wpa_supplicant (EulerOS-SA-2020-2477)

According to the version of the wpasupplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request...

Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2020-2477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Issues Updated Fix For Critical ESXi Flaw

VMware issued an updated fix for a critical-severity remote code execution flaw in its ESXi hypervisor products. Wednesday’s VMware advisory said updated patch versions were available after it was discovered the previous patch, released Oct. 20, did not completely address the vulnerability. That’...

DL1 bug fix update

An update is available for python-jwcrypto, custodia, python-qrcode, python-yubico, python-kdcproxy, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky...