Lucene search
+L

9522 matches found

Microsoft KB
Microsoft KB
added 2021/10/12 7:0 a.m.56 views

Description of the security update for Excel 2013: October 12, 2021 (KB5002043)

Description of the security update for Excel 2013: October 12, 2021 KB5002043 Summary This security update resolves a Microsoft Excel information disclosure vulnerability and Microsoft Excel remote code execution vulnerabilities. To learn more about the vulnerabilities, see the following security...

7.8CVSS7.4AI score0.0269EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/10/12 7:0 a.m.48 views

Description of the security update for SharePoint Enterprise Server 2013: October 12, 2021 (KB4493202)

None None...

7.8CVSS7AI score0.0269EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.11 views

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit...

7.8CVSS7.4AI score0.02302EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/12 12:0 a.m.8 views

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit...

7.8CVSS7.4AI score0.02302EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/04 2:10 p.m.32 views

Security Bulletin: IBM Event Streams is affected by potential data integrity issue (CVE-2020-25649)

Summary IBM Event Streams is potentially vulnerable to a data integrity issue Vulnerability Details CVEID: CVE-2020-25649 DESCRIPTION: FasterXML Jackson Databind could provide weaker than expected security, caused by not having entity expansion secured properly. A remote attacker could exploit th...

7.5CVSS0.8AI score0.17611EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/10/04 6:58 a.m.14 views

Security Bulletin: Vulnerability in MetadataExtractor used by Apache Solr affect IBM Operations Analytics - Log Analysis Analysis (CVE-2019-14262)

Summary The vulnerability in MetadataExtractor 2.1.0 allows stack consumption. This has been addressed. Vulnerability Details CVEID: CVE-2019-14262 DESCRIPTION: MetadataExtractor is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. By persuading a victim to open a...

7.8CVSS2.4AI score0.01546EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/29 7:33 p.m.101 views

Security Bulletin: Vulnerability in IBM HTTP Server used by WebSphere Application Server

Summary There is a vulnerability in the IBM HTTP Server used by WebSphere Application Server. This has been addressed. Vulnerability Details CVEID: CVE-2021-39275 DESCRIPTION: Apache HTTP Server is vulnerable to a buffer overflow, caused by improper bounds checking by the apescapequotes function...

9.8CVSS0.5AI score0.39402EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/23 1:31 a.m.56 views

Security Bulletin: Vulnerabilities in java affect Power Hardware Management Console (CVE-2016-0448)

Summary Java is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0448 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the JMX component could allow a remote attacker to obtain...

4CVSS0.2AI score0.03531EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/20 4:13 p.m.28 views

Security Bulletin: IBM Data Replication Java SDK Update

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to obtain...

4.3CVSS1.9AI score0.02324EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/19 11:41 p.m.26 views

Security Bulletin: Multiple vulnerabilities in Apache Commons* affect Tivoli Netcool/OMNIbus WebGUI (CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090)

Summary Fix is available for vulnerabilities in Apache Commons affecting Tivoli Netcool/OMNIbus WebGUI CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090. Vulnerability Details CVEID: CVE-2021-35517 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by a...

7.5CVSS1.7AI score0.12945EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/17 3:28 p.m.219 views

Security Bulletin: IBM Data Replication Java SDK Update

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause...

4.3CVSS1.8AI score0.02272EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/17 3:5 p.m.47 views

Security Bulletin: IBM Data Replication Java SDK Update

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause...

4.3CVSS5.5AI score0.04044EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/17 3:4 p.m.31 views

Security Bulletin: IBM Data Replication Java SDK Update

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from...

9.8CVSS1.6AI score0.01532EPSS
SaveExploits0Affected Software1
Veeam
Veeam
added 2021/09/16 12:0 a.m.18 views

Veeam Management Pack 9.0 Patch 1 for Microsoft Hyper-V monitoring

This version has been superseded by Veeam Management Pack for Microsoft System Center version 9a. Challenge After upgrading to Veeam Management Pack to version 9.0, Hyper-V hosts disappear partially or entirely from the Hyper-V Servers tab of the Veeam UI. At the same time, Hyper-V infrastructure...

6.9AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/15 10:19 p.m.31 views

Security Bulletin: Multiple Vulnerabilities in Apache Commons Compress affect WebSphere Application Server Liberty (CVE-2021-33517, CVE-2021-36090)

Summary There are multiple vulnerabilities in the Apache Commons Compress library that is used by WebSphere Application Server Liberty. This has been addressed. Vulnerability Details CVEID: CVE-2021-35517 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by an out ...

7.5CVSS0.7AI score0.12945EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/15 7:3 p.m.24 views

Security Bulletin: WebSphere Application Server is vulnerable to Information Disclosure (CVE-2021-29842)

Summary WebSphere Application Server configured with a federated repository is vulnerable to information disclosure. This has been addressed. Vulnerability Details CVEID: CVE-2021-29842 DESCRIPTION: IBM WebSphere Application Server could allow a remote user to enumerate usernames due to a...

5.3CVSS0.2AI score0.01345EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/09/15 12:0 a.m.28 views

Microsoft Excel 2013 Service Pack 1 Multiple RCE Vulnerabilities (KB5002014)

This host is missing an important security update according to Microsoft KB5002014 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.6AI score0.06358EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/09/15 12:0 a.m.28 views

Microsoft Office 2013 Service Pack 1 RCE Vulnerability (KB5001958)

This host is missing an important security update according to Microsoft KB5001958 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.6AI score0.07987EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2021/09/14 2:0 p.m.56 views

Description of the security update for Office Web Apps Server 2013: September 14, 2021 (KB5002009)

None None...

7.8CVSS7AI score0.06358EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/09/14 2:0 p.m.48 views

Description of the security update for Office 2013: September 14, 2021 (KB5001958)

Description of the security update for Office 2013: September 14, 2021 KB5001958 Summary This security update resolves a Microsoft Office Access connectivity engine remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...

7.8CVSS7.6AI score0.07987EPSS
SaveExploits0
Rows per page
Query Builder