9523 matches found
Security Bulletin: IBM Netezza Platform Software is affected by a vulnerability in OpenSSL (CVE-2014-0160)
Summary A security vulnerability has been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerability...
Security Bulletin: IBM Netezza Platform Software is affected by the following OpenSSL vulnerabilities: CVE-2014-0224
Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients an...
CVE-2019-16520
The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...
Cross site scripting
The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...
CVE-2019-16520
The All-in-One SEO Pack WordPress plugin (before version 3.2.7) is vulnerable to Stored XSS due to improper encoding of the SEO-specific description for posts via unsafe placeholder replacement. Affected: WordPress plugin All in One SEO Pack
CVE-2019-16520
The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...
Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4520409)
Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4520409 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 This update is included in the Quality Rollup that's dated...
Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Server 2008 R2 SP1 (KB4516551)
Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Server 2008 R2 SP1 KB4516551 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft...
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB4484123)
This host is missing an important security update according to Microsoft KB4484123 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Description of the security update for Office 2010: October 8, 2019
Description of the security update for Office 2010: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software when the software fails to correctly handle objects in memory. . To learn more about the vulnerability, see...
Update Rollup 13.1 for Windows Azure Pack Web Sites version 2
None None...
Description of the security update for SharePoint Enterprise Server 2016: October 8, 2019
None None...
Description of the security update for Excel 2013: October 8, 2019
Description of the security update for Excel 2013: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software fails to correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4524103)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4524103 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
KLA11655 A remote code execution vulnerability in Microsoft Azure
A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1372 Related products Microsoft-Windows Microsoft-Azure CVE list CVE-2019-1372 critical KB list Solution Install necessary...
Security Bulletin: IBM Cloud Private for Data is affected by a vulnerability in Go Language (CVE-2019-6486)
Summary IBM Cloud Private for Data is affected by a denial of service vulnerability in Open Source Go Language which could allow a local attacker to consume all available CPU resources. Vulnerability Details CVEID: CVE-2019-6486 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused ...
Security Bulletin: IBM Cloud Private for Data is affected by a vulnerabilty in OpenSSL (CVE-2019-1559)
Summary IBM Cloud Private for Data is affected by a vulnerability in OpenSSL, CVE-2019-1559 that could allow a remote attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by...
Security Bulletin: IBM Cloud Private for Data is affected by a privilege escalation vulnerability in Kubernetes API server
Summary IBM Cloud Private for Data is affected by a security vulnerability in Kubernetes which in some cases can allow unauthorized access to the Kubernetes API Server and/or trusted user privilege escalation. Vulnerability Details CVEID: CVE-2018-1002105 DESCRIPTION: Kubernetes could allow a...
Security Bulletin: Information disclosure in WebSphere Application Server ND (CVE-2019-4505)
Summary There is an information disclosure in WebSphere Application Server ND. Vulnerability Details CVEID: CVE-2019-4505 DESCRIPTION: IBM WebSphere Application Server Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This...
October 1, 2019, update for Outlook 2013 (KB4484096)
October 1, 2019, update for Outlook 2013 KB4484096 This article describes update 4484096 for Microsoft Outlook 2013 that was released on October 1, 2019. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...