Security Bulletin: Java vulnerability CVE-2020-2601 affecting IBM Streams

Summary Java vulnerability CVE-2020-2601 affecting IBM Streams. Please see below for more details on this vulnerability. Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Security component could allow a...

Security Bulletin: Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input.

Summary Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. An attacker could exploit this vulnerability using a method call to obtain sensitive information. Vulnerability Details Third Party Entry: 177835 DESCRIPTION:...

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

CVE-2020-17159

CVE-2020-17159 affects Microsoft Visual Studio Code Java Extension Pack and is described as a Remote Code Execution vulnerability. The connected documents consistently reference this extension pack as the affected component and classify the issue as high-severity (CVSS v3.1 7.8) with local attack...

CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

Security Bulletin: vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise

Summary Vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise . The DataDirect ODBC Drivers used by IBM App Connect Enterprise and IBM Integration Bus have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: During key agreement in...

CVE-2020-17159: Undefined Security Weakness

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

Microsoft Excel 2010 Service Pack 2 Multiple Remote Code Execution Vulnerabilities (KB4493148)

This host is missing an important security update according to Microsoft KB4493148 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Outlook 2013 Service Pack 1 Denial of Service Vulnerability (KB4486732)

This host is missing an important security update according to Microsoft KB4486732 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4493140)

This host is missing an important security update according to Microsoft KB4493140 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Service Pack 1 Information Disclosure And RCE Vulnerabilities (KB4493139)

This host is missing an important security update according to Microsoft KB4493139 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Security Bulletin: Older version of common Open Source: batik-dom-1.9.1.jar found in the MaximoForgeViewerPlugIn which is shipped with IBM Maximo for Civil Infrastructure

Summary There is an older version of common Open Source: batik-dom-1.9.1.jar found in the Maximo data loader which is shipped with IBM Maximo for Civil Infrastructure. In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream a...

git:fuzz-pack-headers: Use-after-poison in unpack_object_header_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6047165599973376 Project: git Fuzzing Engine: honggfuzz Fuzz Target: fuzz-pack-headers Job Type: honggfuzzasangit Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe173e000 Crash State: unpackobjectheaderbuffer...

Description of the security update for Office 2010: December 8, 2020

Description of the security update for Office 2010: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122. Note To apply this securi...

Description of the security update for SharePoint Enterprise Server 2016: December 8, 2020 (KB4486753)

None None...

Description of the security update for Outlook 2013: December 8, 2020

Description of the security update for Outlook 2013: December 8, 2020 Summary This security update resolves Microsoft Outlook information disclosure vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17119. Note To apply this...

Description of the security update for SharePoint Foundation 2010: December 8, 2020

Description of the security update for SharePoint Foundation 2010: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...