HPE iLO Amplifier Pack server 安全漏洞

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

Important: Red Hat Security Advisory: CloudForms 5.0.10 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...

Security Bulletin: Multiple vulnerabilities in Apache Batik affect Tivoli Netcool/OMNIbus WebGUI (CVE-2017-5662, CVE-2018-8013, CVE-2015-0250, CVE-2019-17566)

Summary Fix is available for vulnerabilities in Apache Batik affecting Tivoli Netcool/OMNIbus WebGUI CVE-2017-5662, CVE-2018-8013, CVE-2015-0250, CVE-2019-17566. Vulnerability Details CVEID: CVE-2019-17566 DESCRIPTION: Apache Batik is vulnerable to server-side request forgery, caused by improper...

Security Bulletin: Java vulnerability CVE-2020-2590 affecting IBM Streams

Summary Java vulnerability CVE-2020-2590 affecting IBM Streams. Please see below for more details. Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause no...

Security Bulletin: Apache Hadoop could allow a remote attacker to obtain sensitive information that could affect IBM Streams.

Summary In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through HTTP is not enabled. Please see more details below. Vulnerability Details CVEID:...

Security Bulletin: Java vulnerability CVE-2020-2601 affecting IBM Streams

Summary Java vulnerability CVE-2020-2601 affecting IBM Streams. Please see below for more details on this vulnerability. Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Security component could allow a...

Security Bulletin: Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input.

Summary Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. An attacker could exploit this vulnerability using a method call to obtain sensitive information. Vulnerability Details Third Party Entry: 177835 DESCRIPTION:...

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

CVE-2020-17159

CVE-2020-17159 affects Microsoft Visual Studio Code Java Extension Pack and is described as a Remote Code Execution vulnerability. The connected documents consistently reference this extension pack as the affected component and classify the issue as high-severity (CVSS v3.1 7.8) with local attack...

CVE-2020-17159 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

Security Bulletin: vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise

Summary Vulnerabilities in OpenSSL affect IBM Integration Bus and IBM App Connect Enterprise . The DataDirect ODBC Drivers used by IBM App Connect Enterprise and IBM Integration Bus have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: During key agreement in...

Microsoft Excel 2013 Service Pack 1 Information Disclosure And RCE Vulnerabilities (KB4493139)

This host is missing an important security update according to Microsoft KB4493139 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2010 Service Pack 2 Multiple Remote Code Execution Vulnerabilities (KB4493148)

This host is missing an important security update according to Microsoft KB4493148 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4493140)

This host is missing an important security update according to Microsoft KB4493140 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Outlook 2013 Service Pack 1 Denial of Service Vulnerability (KB4486732)

This host is missing an important security update according to Microsoft KB4486732 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Security Bulletin: Older version of common Open Source: batik-dom-1.9.1.jar found in the MaximoForgeViewerPlugIn which is shipped with IBM Maximo for Civil Infrastructure

Summary There is an older version of common Open Source: batik-dom-1.9.1.jar found in the Maximo data loader which is shipped with IBM Maximo for Civil Infrastructure. In Apache Batik 1.x before 1.10, when deserializing subclass of AbstractDocument, the class takes a string from the inputStream a...