Security Bulletin: vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise

Summary Vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise . The DataDirect ODBC Drivers used by IBM App Connect Enterprise and IBM Integration Bus have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: During key agreement in...

CVE-2020-17159: Undefined Security Weakness

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

Microsoft Outlook 2013 Service Pack 1 Denial of Service Vulnerability (KB4486732)

This host is missing an important security update according to Microsoft KB4486732 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4493140)

This host is missing an important security update according to Microsoft KB4493140 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2010 Service Pack 2 Multiple Remote Code Execution Vulnerabilities (KB4493148)

This host is missing an important security update according to Microsoft KB4493148 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Service Pack 1 Information Disclosure And RCE Vulnerabilities (KB4493139)

This host is missing an important security update according to Microsoft KB4493139 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Security Bulletin: Older version of common Open Source: batik-dom-1.9.1.jar found in the MaximoForgeViewerPlugIn which is shipped with IBM Maximo for Civil Infrastructure

Summary There is an older version of common Open Source: batik-dom-1.9.1.jar found in the Maximo data loader which is shipped with IBM Maximo for Civil Infrastructure. In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream a...

git:fuzz-pack-headers: Use-after-poison in unpack_object_header_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6047165599973376 Project: git Fuzzing Engine: honggfuzz Fuzz Target: fuzz-pack-headers Job Type: honggfuzzasangit Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe173e000 Crash State: unpackobjectheaderbuffer...

Description of the security update for SharePoint Foundation 2010: December 8, 2020

Description of the security update for SharePoint Foundation 2010: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...

Description of the security update for SharePoint Foundation 2013: December 8, 2020

Description of the security update for SharePoint Foundation 2013: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...

Description of the security update for Office 2010: December 8, 2020

Description of the security update for Office 2010: December 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Excel that could allow remote code execution if a user opens a specially crafted Excel file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Office Web Apps Server 2013: December 8, 2020

None None...

Description of the security update for Office 2010: December 8, 2020

Description of the security update for Office 2010: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122. Note To apply this securi...

Description of the security update for SharePoint Enterprise Server 2016: December 8, 2020 (KB4486753)

None None...

Description of the security update for Outlook 2013: December 8, 2020

Description of the security update for Outlook 2013: December 8, 2020 Summary This security update resolves Microsoft Outlook information disclosure vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17119. Note To apply this...

IBM DB2 9.7 < FP11 40481 / 10.1 < FP6 40480 / 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Command Injection (Windows)

A command injection vulnerability exists in IBM DB2 due to a DLL search order hijacking vulnerability in Microsoft Windows client. An unauthenticated, local attacker can exploit this, by placing a specially crafted file in a compromised folder, to execute arbitrary commands. Note that Nessus has...

Microsoft Exchange Server Code Issue Vulnerability

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A code issue vulnerability exists in Microsoft Exchange Server, which can be...

PT-2020-5228 · Microsoft · Visual Studio Code Java Extension Pack

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Java Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Language Support component of the Microsoft Visual Studio Code Java Extension Pack...

KLA12020 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure DevOps Server can be...

IBM DB2 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Buffer Overflow (Windows)

A buffer overflow condition exists in IBM DB2 due to improper bounds checking. An unauthenticated, local attacker can exploit this to execute arbitrary code on the system with root privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's...