9493 matches found
CVE-2023-39341
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service DoS condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Editio...
CVE-2023-39341
The CVE-2023-39341 issue affects FFRI yarai and related OEM products, where improper handling of exceptional conditions can cause a Denial-of-Service (DoS). Affected software families and versions include FFRI yarai (3.4.0–3.4.6, 3.5.0) and FFRI yarai Home and Business Edition (1.4.0), plus relat...
Microsoft Word 2013 Service Pack 1 Defense in Depth Security Update (KB5002445)
This host is missing a critical security update according to Microsoft KB5002445 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Excel 2013 Service Pack 1 Defense in Depth Security Update (KB5002451)
This host is missing an important security update according to Microsoft KB5002451 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Outlook 2013 Service Pack 1 Spoofing Vulnerability (KB5002449)
This host is missing an important security update according to Microsoft KB5002449 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Description of the security update for Outlook 2013: August 8, 2023 (KB5002449)
Description of the security update for Outlook 2013: August 8, 2023 KB5002449 Summary This security update resolves a Microsoft Outlook spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-36893. Note: To apply this security...
Description of the security update for PowerPoint 2013: August 8, 2023 (KB5002399)
Description of the security update for PowerPoint 2013: August 8, 2023 KB5002399 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply...
Description of the security update for Visio 2013: August 8, 2023 (KB5002417)
Description of the security update for Visio 2013: August 8, 2023 KB5002417 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply this...
Description of the security update for Publisher 2013: August 8, 2023 (KB5002391)
Description of the security update for Publisher 2013: August 8, 2023 KB5002391 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply th...
Description of the security update for Office 2013: August 8, 2023 (KB5002439)
Description of the security update for Office 2013: August 8, 2023 KB5002439 Summary This security update for Microsoft Office provides defense-in-depth functionality updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: ...
Description of the security update for SharePoint Enterprise Server 2016: August 8, 2023 (KB5002453)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: August 8, 2023 (KB5002422)
None None...
Microsoft Windows Security Vulnerabilities
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Reliability Analysis Metrics Calculation Engine. An attacker could exploit the vulnerability to elevate privileges. The following...
IBM DB2 Buffer Overflow (7010565) (Windows)
According to it self-reported version number, IBM Db2 is is vulnerable to a is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied only on the...
IBM DB2 DoS (7010561) (Unix)
According to it self-reported version number, IBM Db2 is is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
IBM DB2 Privilege Escalation (7010571) (Windows)
According to its self-reported version number, IBM Db2 on Windows may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in t...
New InsightCloudSec Compliance Pack for CIS AWS Benchmark 2.0.0
The Center for Internet Security CIS recently released version two of their AWS Benchmark. CIS AWS Benchmark 2.0.0 brings two new recommendations and eliminates one from the previous version. The update also includes some minor formatting changes to certain recommendation descriptions. In this...
GHSA-WXF3-4FVJ-VQQX Unsafe plugins can be installed via pack import by tenant admins
Summary Unsafe plugins for instance sql-list can be installed in subdomain tenants via pack import even if unsafe plugin installation for tenants is disables Details I have an example https://bot20230704.saltcorn.com/view/allplugins It's publicly accessible but has not so secure values except lis...
Unsafe plugins can be installed via pack import by tenant admins
Summary Unsafe plugins for instance sql-list can be installed in subdomain tenants via pack import even if unsafe plugin installation for tenants is disables Details I have an example https://bot20230704.saltcorn.com/view/allplugins It's publicly accessible but has not so secure values except lis...
Security Bulletin: IBM B2B Advanced Communications is vulnerable to denial of service (CVE-2023-24971)
Summary IBM B2B Advanced Communications has addressed a denial of service vulnerability. Vulnerability Details CVEID:CVE-2023-24971 DESCRIPTION: IBM B2B Advanced Communications could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. CVSS Base...