Security Bulletin: Potential vulnerability related to Unsafe Deserialization in Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2019-0192)

Summary In Solr the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of unsafe deserialization in Solr to trigger remote code execution on the Solr side. Vulnerability Details CVEID: CVE-2019-0192...

Security Bulletin: A security vulnerability has been addressed in IBM Cognos Analytics (CVE-2019-4178)

Summary This bulletin addresses a security vulnerability that has been fixed in IBM Cognos Analytics 11.0.13 FP1 as well as 11.0.9-11.0.12 Interim Fixes. IBM Cognos Analytics could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL reques...

Security Bulletin: IBM MQ Console has inadequate input validation (CVE-2018-1836)

Summary The IBM MQ console has inadequate input validation in one of its forms that could allow an attacker to inject unintended data into fields. Vulnerability Details CVEID: CVE-2018-1836 DESCRIPTION: IBM MQ Console is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4462204)

This host is missing an important security update according to Microsoft KB4462204 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4462209)

This host is missing an important security update according to Microsoft KB4462209 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4462223)

This host is missing an important security update according to Microsoft KB4462223 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Multiple Vulnerabilities (KB4464520)

This host is missing an important security update according to Microsoft KB4464520 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2018-7118

A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant SPP Bundled Software earlier than version 2018.09.0...

CVE-2018-7118

A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant SPP Bundled Software earlier than version 2018.09.0...

Description of the security update for Office 2010: April 9, 2019

Description of the security update for Office 2010: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when the Microsoft Office Access Connectivity Engine incorrectly handles objects in memory. To learn more about the vulnerability, see the...

Description of the security update for SharePoint Enterprise Server 2013: April 9, 2019

None None...

Description of the security update for SharePoint Enterprise Server 2016: April 9, 2019

None None...

Description of the security update for Office 2013: April 9, 2019

Description of the security update for Office 2013: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office does not correctly handle certain files. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...

Description of the security update for Excel 2013: April 9, 2019

Description of the security update for Excel 2013: April 9, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Office 2010: April 9, 2019

Description of the security update for Office 2010: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office does not correctly handle certain files. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...

Microsoft Office Access Connectivity Engine CVE-2019-0823 Remote Code Execution Vulnerability

Description Microsoft Office Access Connectivity Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office...

WordPress Pipdig Power Pack plugin <= 4.7.3 - Vendor Backdoors & Suspicious Code

Vendor Backdoors & Suspicious Code found in WordPress Pipdig Power Pack plugin versions = 4.7.3. Solution Update the WordPress Pipdig Power Pack plugin to the latest available version at least 4.8.0...

Security Bulletin: Security vulnerabilities identified in OpenSSL affect Rational Build Forge (CVE-2018-0734, CVE-2018-5407 and CVE-2019-1559)

Summary OpenSSL has security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details This section includes the vulnerability details that affects the Rational Build Forg...

Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2019-0190; CVE-2018-17189; CVE-2018-17199)

Summary Apache HTTP Server has security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details This section includes the vulnerability details that affects the Rational...

Security Bulletin: Potential denial of service in WebSphere Application Server Admin Console (CVE-2019-4080)

Summary There is a potential denial of service in the Admin Console of WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4080 DESCRIPTION: IBM WebSphere Application Server Admin Console is vulnerable to a potential denial of service, caused by improper parameter parsing. A remot...