9300 matches found
Description of the security update for SharePoint Foundation 2010: January 9, 2018
Description of the security update for SharePoint Foundation 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the security update for SharePoint Foundation 2013: January 9, 2018
Description of the security update for SharePoint Foundation 2013: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Python 'Lib/webbrowser.py' Remote Command Execution Vulnerability(CVE-2017-17522)
Description Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. Vulnerable: Python Software Foundation Python 3.6...
CVE-2017-1507
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619...
CVE-2017-1507
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619...
Information disclosure
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619...
CVE-2017-1507
CVE-2017-1507 corresponds to an information-disclosure vulnerability in IBM Jazz Foundation/CLM stack (e.g., Rational CLM, RTC, RQM, DOORS Next Gen, etc.) where a scan could leak sensitive data. Affected versions include Rational CLM/RCS/RTC/RQM families from 4.0 up to 6.0.4, with remediation via...
CVE-2017-1507
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619...
[SECURITY] Fedora 27 Update: ca-certificates-2017.2.20-1.0.fc27
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
[SECURITY] Fedora 26 Update: ca-certificates-2017.2.20-1.0.fc26
This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...
IBM Insights Foundation for Energy Information Disclosure Vulnerability
IBM Insights Foundation for Energy is an energy analytics, data management and visualization software solution for utilities and energy companies. An information disclosure vulnerability exists in IBM Insights Foundation for Energy 2.0. An authenticated user can exploit the vulnerability to obtai...
CVE-2017-1342
IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...
Code injection
IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...
CVE-2017-1342
IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...
CVE-2017-1342
IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457...
CVE-2017-1342
IBM Insights Foundation for Energy 2.0 is affected by a publicly documented information-disclosure vulnerability. An authenticated user could learn sensitive details from error messages, which could be leveraged to conduct further attacks. The exact root cause, affected versions, and remediation ...
Apache Software Foundation Releases Security Updates
The Apache Software Foundation has released security updates to address vulnerabilities in Apache Struts versions 2.5 to 2.5.14. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review Apache Securit...
mozilla -- multiple vulnerabilities
Mozilla Foundation reports: CVE-2017-7843: Web worker in Private Browsing mode can write IndexedDB data CVE-2017-7844: Visited history information leak through SVG image...