937 matches found
kb-mash.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162519 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
KLA11775 XSS vulnerability in Microsoft Dynamics
XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1063 Related products Microsoft-Dynamics-365 CVE list CVE-2020-1063 warning KB list 4552002 4551998 Solution Install necessary updates from the K...
KLA11772 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in .NET Framework can be...
April 21, 2020—KB4550960 (Preview of Monthly Rollup)
None None...
CVE-2020-2813
CVE-2020-2813 affects Oracle E-Business Suite’s Email Center, KB Search component, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise Oracle Email Center, with a requirement for user interaction...
Description of the security update for Office 2013: April 14, 2020
Description of the security update for Office 2013: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists if Microsoft Office incorrectly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilities an...
KLA11749 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to...
KLA11750 Multiple vulnerability in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Dynamics Business...
Description of the security update for Office 2013: May 8, 2018
Description of the security update for Office 2013: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2013: May 8, 2018
Description of the security update for Office 2013: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
ZSQL: Content of ROLE SYS PRIVS Database
This script writes the complete database of ROLE SYS PRIVS to KB. Note:This script stores values in KB only and has no output. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
KLA11767 Microsoft Advisory for Windows
Original advisories ADV200006 Related products Microsoft-Windows-Server-2012 Microsoft-Windows-8 Microsoft-Windows-7 Microsoft-Windows-Server-2008 Microsoft-Windows-10 CVE list KB list Solution Install necessary updates from the KB section, that are listed in your Windows Update Windows Update...
CVE-2020-10416
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/kb-backup.php by adding a question mark ? followed by the payload...
CVE-2020-10416
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/kb-backup.php by adding a question mark ? followed by the payload...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/kb-backup.php by adding a question mark ? followed by the payload...
CVE-2020-10416
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/kb-backup.php by adding a question mark ? followed by the payload...
CVE-2020-10416
Technical details for CVE-2020-10416 are not provided in the connected documents. Public specifics such as affected versions, components, or fixes are not available here; monitor for updates.
KLA11683 ACE vulnerability in Microsoft Dynamics
ACE vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-0905 Related products Microsoft-Dynamics-365 CVE list CVE-2020-0905 high KB list 4538885 4538886 4538884 4538888 4551259 4538708 4551258 453888...
KLA11687 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be...
KLA11685 Spoofing vulnerability in Microsoft Exchange Server
A spoofing vulnerability was found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-0903 Related products Microsoft-Exchange-Server CVE list CVE-2020-0903 warning KB list 4540123 Solution Install necessary updates...