Description of the security update for PowerPoint 2010: March 9, 2021 (KB4504702)

Description of the security update for PowerPoint 2010: March 9, 2021 KB4504702 Summary This security update resolves a Microsoft PowerPoint Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27056. Note: To appl...

Description of the security update for SharePoint Foundation 2013: March 9, 2021 (KB4493238)

Description of the security update for SharePoint Foundation 2013: March 9, 2021 KB4493238 Summary This security update resolves a Microsoft SharePoint Spoofing Vulnerability. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2021-24104 and Microsof...

Description of the security update for Office Web Apps Server 2013: March 9, 2021 (KB4493234)

None None...

Description of the security update for Office 2013: March 9, 2021 (KB4493228)

Description of the security update for Office 2013: March 9, 2021 KB4493228 Summary This security update resolves a Microsoft Office Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

Description of the security update for SharePoint Enterprise Server 2016: March 9, 2021 (KB4493232)

None None...

Description of the security update for SharePoint Enterprise Server 2016: March 9, 2021 (KB4493199)

None None...

Description of the security update for Office 2013: March 9, 2021 (KB4493203)

Description of the security update for Office 2013: March 9, 2021 KB4493203 Summary This security update resolves Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

Description of the security update for Office 2010: March 9, 2021 (KB4493214)

Description of the security update for Office 2010: March 9, 2021 KB4493214 Summary This security update resolves a Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

Description of the security update for Visio 2010: March 9, 2021 (KB4484376)

Description of the security update for Visio 2010: March 9, 2021 KB4484376 Summary This security update resolves a Microsoft Visio Security Feature Bypass Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27055. Note: To apply this...

Description of the security update for Visio 2013: March 9, 2021 (KB4486673)

Description of the security update for Visio 2013: March 9, 2021 KB4486673 Summary This security update resolves a Microsoft Visio Security Feature Bypass Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27055. Note: To apply this...

PT-2021-2297 · Microsoft · Visual Studio Code Java Extension Pack

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Java Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Visual Studio Code Java Extension Pack. Exploitation of this issue may allow a remote...

KLA12110 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...

Microsoft Windows Information Leakage Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Windows Event Tracker. The following products and versions are affected: Windows 10 Version 1803 for 32-bit...

Microsoft Windows Installer backend link vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows 10 Version 18...

Microsoft Visual Studio Code security vulnerabilities

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Visual Studio Code - Java Extension Pack...

Microsoft Office security vulnerabilities

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...

Actionpack Open Redirect Vulnerability

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious websi...

GHSA-8877-PRQ4-9XFW Actionpack Open Redirect Vulnerability

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious websi...

Security Bulletin: IBM Data Replication Java SDK Update

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded, JRockit JSSE component could allow ...

CVE-2021-25315

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior t...