9531 matches found
Remote code execution
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...
CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
...
CVE-2020-17159
CVE-2020-17159 affects Microsoft Visual Studio Code Java Extension Pack and is described as a Remote Code Execution vulnerability. The connected documents consistently reference this extension pack as the affected component and classify the issue as high-severity (CVSS v3.1 7.8) with local attack...
CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
...
Security Bulletin: vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise
Summary Vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise . The DataDirect ODBC Drivers used by IBM App Connect Enterprise and IBM Integration Bus have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: During key agreement in...
Microsoft Excel 2013 Service Pack 1 Information Disclosure And RCE Vulnerabilities (KB4493139)
This host is missing an important security update according to Microsoft KB4493139 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4493140)
This host is missing an important security update according to Microsoft KB4493140 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Outlook 2013 Service Pack 1 Denial of Service Vulnerability (KB4486732)
This host is missing an important security update according to Microsoft KB4486732 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2010 Service Pack 2 Multiple Remote Code Execution Vulnerabilities (KB4493148)
This host is missing an important security update according to Microsoft KB4493148 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Security Bulletin: Older version of common Open Source: batik-dom-1.9.1.jar found in the MaximoForgeViewerPlugIn which is shipped with IBM Maximo for Civil Infrastructure
Summary There is an older version of common Open Source: batik-dom-1.9.1.jar found in the Maximo data loader which is shipped with IBM Maximo for Civil Infrastructure. In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream a...
Description of the security update for SharePoint Enterprise Server 2016: December 8, 2020 (KB4486753)
None None...
Description of the security update for SharePoint Foundation 2010: December 8, 2020
Description of the security update for SharePoint Foundation 2010: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for SharePoint Foundation 2013: December 8, 2020
Description of the security update for SharePoint Foundation 2013: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for Outlook 2013: December 8, 2020
Description of the security update for Outlook 2013: December 8, 2020 Summary This security update resolves Microsoft Outlook information disclosure vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17119. Note To apply this...
Description of the security update for Office 2010: December 8, 2020
Description of the security update for Office 2010: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Excel that could allow remote code execution if a user opens a specially crafted Excel file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: December 8, 2020
Description of the security update for Office 2010: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122. Note To apply this securi...
Description of the security update for Office Web Apps Server 2013: December 8, 2020
None None...
IBM DB2 9.7 < FP11 40481 / 10.1 < FP6 40480 / 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Command Injection (Windows)
A command injection vulnerability exists in IBM DB2 due to a DLL search order hijacking vulnerability in Microsoft Windows client. An unauthenticated, local attacker can exploit this, by placing a specially crafted file in a compromised folder, to execute arbitrary commands. Note that Nessus has...
PT-2020-5228 · Microsoft · Visual Studio Code Java Extension Pack
Name of the Vulnerable Software and Affected Versions: Visual Studio Code Java Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Language Support component of the Microsoft Visual Studio Code Java Extension Pack...
KLA12020 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server can be...