Scientific Linux Security Update : libosinfo on SL7.x x86_64 (20200407)

Libosinfo: osinfo-install-script option leaks password via command line argument C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135815; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

CVE-2020-1009

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

CVE-2020-1009

CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...

CVE-2020-1009: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1011, CVE-2020-1015...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally...

Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries. An attacker could then install programs; view, change, or delete data with the logged in user's privileges. To exploit this vulnerability, an attacker would first...

PT-2020-2275

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in file operation handling in the Microsoft Store Install Service of Windows operating systems. It allows an attacker to potentially elevate their privileges...

Servicing stack update for Windows 10, version 1903 and 1909: April 14, 2020

None None...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics

Summary There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerability in Java SE could allow an...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics

Summary There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVE. This CVE affects the windows platform only. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java...

MS13-054: Description of the security update for Lync 2010 Attendee (user level install): July 9, 2013

Resolves a vulnerability that could allow remote code execution on a client system if a user views shared content that embeds TrueType font files.View products that this article applies to.IntroductionThis update resolves a vulnerability that could allow remote code execution on a client system i...

VulnCheck KEV: CVE-2019-19752

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io...

CentOS 7 : libosinfo (RHSA-2020:1051)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1051 advisory. - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...

WUSA freezes when you install an update in Windows 8.1 or Windows Server 2012 R2

WUSA freezes when you install an update in Windows 8.1 or Windows Server 2012 R2 Symptoms When you install an update that uses the Windows Update Standalone Installer WUSA in Windows 8.1 or Windows Server 2012 R2, the Wusa.exe process freezes. Resolution To resolve this issue, install the update...

Command Injection

Overview All versions of npm-programmatic are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an exec call on the install, uninstall and list functions . This may allow attackers to execute arbitrary code in the system if the package name passe...

Microsoft Office for Mac 2011 14.5.1 update

Describes the Microsoft Office for Mac 2011 14.5.1 update. This update was released on May 19, 2015.Microsoft has released the Microsoft Office for Mac 2011 14.5.1 update. In addition to the application improvements that are mentioned in this article, Office for Mac 2011 is now available as a...

Windows 8.1 Store and Windows Update client improvements: May 13, 2014

Windows 8.1 Store and Windows Update client improvements: May 13, 2014 This article describes some improvements for Windows Store and Windows Update in Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2. Check out the new features of this update and how to obtain this update. This update has...