Description of the security update for Outlook 2010: April 13, 2021 (KB4493185)

Description of the security update for Outlook 2010: April 13, 2021 KB4493185 Summary This security update resolves a Microsoft Outlook memory corruption vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28452. Note: To apply this...

Description of the security update for SharePoint Foundation 2010: April 13, 2021 (KB4504709)

Description of the security update for SharePoint Foundation 2010: April 13, 2021 KB4504709 Summary This security update resolves a Microsoft SharePoint denial-of-service attack vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28450...

Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504719)

None None...

Description of the security update for SharePoint Enterprise Server 2013: April 13, 2021 (KB4493170)

None None...

Description of the security update for Office 2010: April 13, 2021 (KB4504738)

Description of the security update for Office 2010: April 13, 2021 KB4504738 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28449. Note: To apply this...

Description of the security update for Excel 2013: April 13, 2021 (KB4504735)

Description of the security update for Excel 2013: April 13, 2021 KB4504735 Note: There may be some side effects after you install this update. For more information, see KB5003251. Summary This security update resolves a Microsoft Excel information disclosure vulnerability, and Excel Remote Code...

Description of the security update for SharePoint Server 2010: April 13, 2021 (KB4504701)

Description of the security update for SharePoint Server 2010: April 13, 2021 KB4504701 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about these vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28453. Note: To...

Description of the security update for Office 2013: April 13, 2021 (KB3178643)

Description of the security update for Office 2013: April 13, 2021 KB3178643 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28449. Note: To apply this...

Description of the security update for Office 2010: April 13, 2021 (KB4504739)

Description of the security update for Office 2010: April 13, 2021 KB4504739 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28454. Note: To apply this...

Description of the security update for Office 2010: April 13, 2021 (KB4493215)

Description of the security update for Office 2010: April 13, 2021 KB4493215 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28453. Note: To apply this...

PT-2021-2731 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension Pack affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Development Extension Pack for Microsoft Visual Studio Code...

Security Bulletin: Vulnerability in Apache MyFaces affects WebSphere Application Server (CVE-2021-26296)

Summary There is a vulnerability in the Apache MyFaces library used by WebSphere Application Server. This has been addressed. Vulnerability Details CVEID: CVE-2021-26296 DESCRIPTION: Apache MyFaces is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. ...

Security Bulletin: Multiple vulnerabilities in InfoSphere BigInsights (CVE-2013-3998, CVE-2013-3997)

Summary InfoSphere BigInsights is vulnerable to HTTP response splitting and allows open redirects. Vulnerability Details CVE ID: CVE-2013-3998 DESCRIPTION: The InfoSphere BigInsights Web Application Enterprise Console does not prevent HTTP response splitting. HTTP response splitting can be used t...

Security Bulletin: Vulnerability in Apache CXF affects WebSphere Application Server (CVE-2019-12406)

Summary There is a denial of service in the Apache CXF library used by WebSphere Application Server. This has been addressed. Vulnerability Details CVEID: CVE-2019-12406 DESCRIPTION: Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message...

OESA-2021-1131 wavpack security update

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. For version 5.0.0, several new file formats and lossless DSD audio compression were added, making WavPack a universal audio archiving solution. Security Fixes: WavPa...

Security Bulletin: IBM Network Performance Insight 1.3.1 was affected by CVE-2020-17516 in Apache Cassandra.

Summary IBM Network Performance Insight 1.3.1 was affected by CVE-2020-17516 in Apache Cassandra. Vulnerability Details CVEID: CVE-2020-17516 DESCRIPTION: Apache Cassandra could allow a remote attacker to bypass security restrictions, caused by not enforcing encryption setting on inbound internod...

Security Bulletin: Network Performance Insight 1.3.1 was affected by jackson-databind vulnerability (CVE-2020-35728)

Summary Network Performance Insight 1.3.1 was affected by jackson-databind vulnerability CVE-2020-35728 Vulnerability Details CVEID: CVE-2020-35728 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization...

June 1, 2021, update for Office 2013 (KB5001937)

June 1, 2021, update for Office 2013 KB5001937 This article describes update 5001937 for Microsoft Office 2013 that was released on June 1, 2021. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installe...

Vulnerability fixed in HP Integrated Lights Out Amplifier Pack

HP has fixed a vulnerability in Integrated Lights Out Amplifier Pack. An unauthenticated malicious person can exploit the exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the...

Security Bulletin: IBM InfoSphere Information Server is affected by a cross-site scripting vulnerability CVE-2020-4997

Summary A cross-site scripting vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2020-4997 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...