12348 matches found
Description of the security update for Windows Server 2008: October 10, 2017
Description of the security update for Windows Server 2008: October 10, 2017 Summary Vulnerabilities exist in Windows that could allow elevation of privilege or information disclosure. To learn more about the vulnerabilities, go to the Security Update Guide. More Information Important If you...
Description of the security update for Office 2010: July 10, 2018
Description of the security update for Office 2010: July 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2013: July 10, 2018
Description of the security update for Office 2013: July 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office Compatibility Pack: October 10, 2017
Description of the security update for Office Compatibility Pack: October 10, 2017 Summary This security update resolves a vulnerability in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerability, see Microsoft...
Description of the security update for SharePoint Server 2013: October 10, 2017
Description of the security update for SharePoint Server 2013: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for Word Viewer: October 10, 2017
Description of the security update for Word Viewer: October 10, 2017 Summary This security update resolves a vulnerability in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for the Windows information disclosure vulnerability: October 10, 2017
Description of the security update for the Windows information disclosure vulnerability: October 10, 2017 Applies To Windows Server 2008 Service Pack 2 Windows Server 2008 Foundation Windows Server 2008 Standard Windows Server 2008 for Itanium-Based Systems Windows Server 2008 Web Edition Windows...
Update for the d3dcompiler_47.dll component on Windows Server 2008 SP2
Update for the d3dcompiler47.dll component on Windows Server 2008 SP2 Introduction This article describes an update that addresses an issue in Windows Server 2008 Service Pack 2 SP2 that is described in the following Knowledge Base article:4020302 The .NET Framework 4.7 installation is blocked on...
Security Updates for Microsoft Office Compatibility Pack SP3 (October 2017)
Microsoft Office Compatibility Pack SP3 is missing a security update. It is, therefore, affected by a remote code execution vulnerability : - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who...
CVE-2017-12819
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...
CVE-2017-12819
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...
Design/Logic Flaw
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...
CVE-2017-12819
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...
CVE-2017-12819: Improper Authentication
Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...
CVE-2017-11498
Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...
CVE-2017-11497
Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters...
PT-2017-12709
Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55 Description The issue allows remote manipulations with the language pack updater, leading to an NTLM-relay attack for the system user. Thi...
CVE-2017-11498: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...
PT-2017-12052
Name of the Vulnerable Software and Affected Versions Gemalto ACC Admin Control Center versions HASP SRM 2.10 through Sentinel LDK 7.50 Description The issue allows remote attackers to shut down the remote process, resulting in a denial of service. This can be achieved via a language pack ZIP fil...
CVE-2017-8448
An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges...