9526 matches found
The Hidden Bee infection chain, part 1: the stegano pack
About a year ago, we described the Hidden Bee miner delivered by the Underminer Exploit Kit. Hidden Bee has a complex and multi-layered internal structure that is unusual among cybercrime toolkits, making it an interesting phenomenon on the threat landscape. That's why we're dedicating a series o...
Security Bulletin: Information disclosure in Apache Commons HttpClient may affect WebSphere Application Server as part of IBM InfoSphere Identity Insight (CVE-2012-5783)
Summary There is a potential information disclosure in Apache Commons HttpClient used by WebSphere Application Server shipped as part of IBM InfoSphere Identity Insight. Vulnerability Details CVEs: CVE-2012-5783 Link to security bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22016216...
Security Bulletin: IBM StoredIQ is affected by a cross-site request forgery (CVE-2019-4167)
Summary IBM StoredIQ has addressed the following vulnerability: Cross-site request forgery. Vulnerability Details CVEID: CVE-2019-4167 DESCRIPTION: IBM StoredIQ is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from...
WordPress social-buttons-pack plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. social-buttons-pack plugin is a social sharing plugin used in it. A cross-site scripting vulnerability exists in WordPress...
Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB4475563)
This host is missing an important security update according to Microsoft KB4475563 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4475506)
This host is missing an important security update according to Microsoft KB4475506 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Outlook 2010 Service Pack 2 Multiple Vulnerabilities (KB4475573)
This host is missing an important security update according to Microsoft KB4475573 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Word 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4475547)
This host is missing an important security update according to Microsoft KB4475547 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Security Bulletin: Cross-site Scripting Affects IBM Emptoris Spend Analysis (CVE-2019-4482)
Summary Cross-site Scripting affects IBM Emptoris Spend Analysis. Vulnerability Details CVEID: CVE-2019-4482 DESCRIPTION: IBM Emptoris Spend Analysis is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
Moderate: Red Hat Security Advisory: CloudForms 4.7.8 security, bug fix and enhancement update
An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Description of the security update for SharePoint Server 2010 Office Web Apps: August 13, 2019
Description of the security update for SharePoint Server 2010 Office Web Apps: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerabilit...
Description of the security update for Outlook 2010: August 13, 2019
Description of the security update for Outlook 2010: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
August 13, 2019—KB4512491 (Security-only update)
None None...
Description of the security update for Office Web Apps Server 2013: August 13, 2019
None None...
Description of the security update for Office 2010: August 13, 2019
Description of the security update for Office 2010: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office 2013: August 13, 2019
Description of the security update for Office 2013: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists if the Windows Jet Database Engine incorrectly handles objects in memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for SharePoint Enterprise Server 2016: August 13, 2019
None None...
Description of the security update for Word 2010: August 13, 2019
Description of the security update for Word 2010: August 13, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if ti does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
