Description of the security update for SharePoint Server 2010: January 12, 2021

Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...

Description of the security update for SharePoint Foundation 2010: January 12, 2021

Description of the security update for SharePoint Foundation 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the security update for Office 2010: January 12, 2021

Description of the security update for Office 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Office 2010: January 12, 2021

Description of the security update for Office 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

End of support for Office 2010

End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...

Description of the security update for SharePoint Enterprise Server 2013: January 12, 2021

None None...

Description of the security update for SharePoint Enterprise Server 2013: January 12, 2021

None None...

Microsoft Windows Update Stack Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Windows Update Stack. The following products and editions are affected:Windows Server, version 20H2 Server Core Installation,Windows 10 Version 20H2...

Microsoft Excel Buffer Error Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft Excel 2013 Service Pack ...

DEBIAN-CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

Security Bulletin: Stored Cross-Site Scripting Vulnerability Affects IBM Emptoris Sourcing (CVE-2020-4895)

Summary Cross-Site Scripting Stored affects IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2020-4895 DESCRIPTION: IBM Emptoris is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

Security Bulletin: Forced Submit Using GET Vulnerability Affects IBM Emptoris Strategic Supply Management Platform (CVE-2020-4893)

Summary Web form forced to submit using GET method vulnerability affects IBM Emptoris Strategic Supply Management Platform. Vulnerability Details CVEID: CVE-2020-4893 DESCRIPTION: IBM Emptoris transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure...

Security Bulletin: Reflected Cross-site Scripting Vulnerability Affects IBM Emptoris Contract Management (CVE-2020-4892)

Summary Cross-site Scripting Reflected affects IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-4892 DESCRIPTION: IBM Emptoris is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

WordPress All in One SEO Pack plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress All in One SEO Pack plugin prior to version...

WordPress File Upload Vulnerability (CNVD-2021-29447)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.One SEO Pack is a plugin for WordPress. A security vulnerability exists in One SEO Pack plugin for WordPress versions...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise (CVE-2020-15168)

Summary IBM App Connect Enterprise ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2020-15168 DESCRIPTION: Node.js node-fetch module is vulnerable to a denial of service, caused by the...

Security Bulletin: Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information.

Summary Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information. Vulnerability Details CVEID: CVE-2020-4336 DESCRIPTION: IBM WebSphere Extreme Scale stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized...

Security Bulletin: A security vulnerability has been identified inPCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2019-20838)

Summary A security vulnerability has been disclosed in the pcre library libpcre, which is installed as part of IBM Tivoli Network Manager version 4.2. Information about this vulnerability has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-20838 DESCRIPTION: PCRE is...

Security Bulletin: A security vulnerability has been identified in PCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-14155)

Summary A security vulnerability has been disclosed in the pcre library libpcre, which is installed as part of IBM Tivoli Network Manager version 4.2. Information about this vulnerability has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-14155 DESCRIPTION: PCRE coul...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...