4642 matches found
September 11, 2018—KB4457140 (Security-only update)
None None...
Description of the Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1 and Server 2012 R2 (KB 4457034)
Description of the Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1 and Server 2012 R2 KB 4457034 Summary This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when .NET...
September 11, 2018—KB4457131 (OS Build 14393.2485)
None None...
Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 (KB 4457029)
Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 KB 4457029 Summary This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when .NET Framework processes untrusted input. An attacker who successfully...
Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 and for .NET Framework 4.6 for Server 2008 SP2 (KB 4457027)
None None...
Apache Struts 2.x < 2.3.15.1 Multiple Vulnerabilities (S2-016) (S2-017)
The version of Apache Struts running on the remote host is 2.x prior to 2.3.15.1. It, therefore, is affected by multiple vulnerabilities including a remote command execution vulnerability and an open redirect vulnerability. Note that Nessus has not tested for these issues but has instead relied...
SSA-2018-0906074602
New mozilla-thunderbird packages are available for Slackware 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-60.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information,...
Cisco Identity Services Engine Struts2 Namespace Vulnerability
According to its self-reported version, the Cisco Identity Services Engine Software is affected by a struts2 namespace vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...
Air Canada Suffers Data Breach — 20,000 Mobile App Users Affected
Air Canada has confirmed a data breach that may have affected about 20,000 customers of its 1.7 million mobile app users. The company said it had "detected unusual log-in behavior" on its mobile app between August 22 and 24, during which the personal information for some of its customers "may...
CVE-2018-12828
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation...
CVE-2018-12828
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation...
Privilege escalation
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation...
CVE-2018-15576
An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key...
Apache Struts Security Update (S2-057) - Version Check
Apache Struts is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Security Only update for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 (KB 4340007)
Security Only update for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 KB 4340007 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists when .NET Framework does not validate input correctly. An attacker who...
August 14, 2018—KB4343909 (OS Build 17134.228)
None None...
August 14, 2018—KB4343885 (OS Build 15063.1266)
None None...
Description of the security update for Office 2010: August 14, 2018
Description of the security update for Office 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Update Rollup 23 for Exchange Server 2010 Service Pack 3
Update Rollup 23 for Exchange Server 2010 Service Pack 3 Summary This update rollup is a security update. This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE:Microsoft Common...
Description of the security update for Office 2010: August 14, 2018
Description of the security update for Office 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...