January 17, 2019—KB4480955 (Preview of Monthly Rollup)

None None...

Joomla! 2.5.x < 3.9.2 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Stored XSS in modbanners affects Joomla 2.5.0 through 3.9.1 - Stored XSS in comcontact affects Joomla 2.5.0 through 3.9.1 - Stored XSS issue in the Global Configuration...

January 15, 2019—KB4480967 (OS Build 16299.936)

None None...

January 15, 2019—KB4480969 (Preview of Monthly Rollup)

None None...

January 15, 2019—KB4480976 (OS Build 17134.556)

None None...

Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: January 8, 2019

Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: January 8, 2019 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...

help-wp.ru XSS vulnerability

Open Bug Bounty ID: OBB-718964 Description| Value ---|--- Affected Website:| help-wp.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

In Project Maven's Wake, the Pentagon Seeks AI Tech Talent

The Defense Department wants to use AI in warfare. In the aftermath of Project Maven, it still needs Big Tech’s help...

Information Disclosure

managesieve is vulnerable to information disclosure attacks. The vulnerability exists as the environment variable SIEVEPASSWORD is disclosed when displaying usage help...

CVE-2018-19439

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

CVE-2018-19439: Improper Neutralization of Input During Web Page Generation

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

Description of the security update for the elevation of privilege vulnerabilities in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: December 11, 2018

Description of the security update for the elevation of privilege vulnerabilities in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: December 11, 2018 Summary Windows elevation of privilege vulnerabilities exist in the following scenarios: When Windows incorrectly handles calls...

Citrix Workspace app fails with "cannot connect to the server" when connected externally

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver for MAC and Windows failing to add store...

Nonprofits on Facebook Get Hacked—Then They Really Need Help

Facebook is an enormous platform for charitable giving, but some nonprofit leaders say there aren’t enough resources when something goes wrong...

Receiver for iOS(Workspace 18.8.0) : iOS user unable to launch app

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. After receiver upgrade to Workspace, some iOS users unable to launch Citrix application from their...

Cannot start apps. Please run Reset Receiver to resolve a lockdown conflict for LegacyLocalUserNameAndPassword (error 2320).

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Getting following error message while trying to launch application...

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018 Summary A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. To learn more...

Brocade Fabric OS Security Bypass Vulnerability (CNVD-2018-23085)

Brocade Fabric OS FOS is an embedded operating system used in devices such as switches and routers from Brocade Communications Systems Brocade. command line interface CLI is one of the command line interfaces. A security vulnerability exists in the 'help' command in the Brocade FOS CLI. A local...

CVE-2018-6437

A Vulnerability in the help command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

CVE-2018-6437: Undefined Security Weakness

A Vulnerability in the help command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...