Description of the security update for Excel 2010: September 8, 2020

Description of the security update for Excel 2010: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following...

Description of the security update for SharePoint Enterprise Server 2013: September 8, 2020

None None...

Windows Camera Codec Pack Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

Description of the security update for SharePoint Enterprise Server 2016: September 8, 2020

None None...

Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the...

Description of the security update for Office Web Apps Server 2013: September 8, 2020

None None...

Description of the security update for SharePoint Enterprise Server 2013: September 8, 2020

None None...

Windows Language Pack Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...

DST changes in Windows for Yukon, Canada: September 8, 2020

None None...

PT-2020-4082 · Microsoft · Windows Language Pack Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Language Pack Installer affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Language Pack Installer, allowing an attacker to run processes in an elevated context...

Security Bulletin: Vulnerability in the IBM HTTP Server used by WebSphere Application Server is fixed in 9.0.0.3

Summary There is a spoofing vulnerability in the IBM HTTP Server used by WebSphere Application Server version 9. This vulnerability has been fixed in IBM HTTP Server version 9.0.0.3. Vulnerability Details CVEID: CVE-2020-11985 DESCRIPTION: Apache HTTP Server could allow a remote attacker to condu...

Trend Micro Vulnerability Protection LDAP Authentication Bypass Vulnerability

Trend Micro Vulnerability Protection is an endpoint vulnerability protection product that provides one step faster and stronger endpoint protection. An LDAP authentication bypass vulnerability exists in Trend Micro Vulnerability Protection 2.0 SP2, which can be exploited by an attacker to bypass...

ASX to MP3 converter 3.1.3.7.2010.11.05 - (.wax) Local Buffer Overflow (DEP,ASLR Bypass) Exploit

Exploit Title: ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow DEP,ASLR Bypass PoC Software Link Download: https://github.com/x00x00x00x00/ASXtoMP3Converter3.1.3.7.2010.11.05/blob/master/ASXtoMP3Converter3.1.3.7.2010.11.05.exe?raw=true Exploit Author: Paras Bhatia Discovery...

ASX To MP3 Converter 3.1.3.7.2010.11.05 Buffer Overflow

Exploit Title: ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow DEP,ASLR Bypass PoC Software Link Download: https://github.com/x00x00x00x00/ASXtoMP3Converter3.1.3.7.2010.11.05/blob/master/ASXtoMP3Converter3.1.3.7.2010.11.05.exe?raw=true Exploit Author: Paras Bhatia Discovery...

Security Bulletin: WebSphere Application Server is vulnerable to a remote code execution vulnerability (CVE-2020-4589)

Summary WebSphere Application Server is vulnerable to a remote code execution vulnerability. This has been addressed. Vulnerability Details CVEID: CVE-2020-4589 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to execute arbitrary code on the system with a...

Information Disclosure

x-pack-security is vulnerable to information disclosure. When a user runs the same query as queried by another more privileged user, the scrolling search can leak fields that should be hidden, resulting in the user gaining additional permissions against a restricted index...

Security Bulletin: IBM Cloud Private is vulnerable to IBM WebSphere Application Server Liberty vulnerabilities (CVE-2020-4303, CVE-2020-4304)

Summary IBM Cloud Private is vulnerable to IBM WebSphere Application Server Liberty vulnerabilities Vulnerability Details CVEID: CVE-2020-4303 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users t...

SUSE-SU-2020:14456-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Fix broken translation-loading boo1173991 allow addon sideloading mark signatures for langpacks non-mandatory do not autodisable user profile scopes - Google API key is not usable for geolocation service any more - Mozilla Firefox 78.1...

Security Bulletin: Vulnerabilities in Apache Tomcat affects IBM Platform Symphony

Summary This interim fix provides instructions on upgrading Apache Tomcat to v8.5.57 in IBM Platform Symphony 7.1 Fix Pack 1 in order to address security vulnerabilities CVE-2020-9484, CVE-2020-11996, CVE-2020-13934, and CVE-2020-13935 in Apache Tomcat. Vulnerability Details CVEID: CVE-2020-13934...

Microsoft Word 2013 Service Pack 1 Multiple Information Disclosure Vulnerabilities (KB4484484)

This host is missing an important security update according to Microsoft KB4484484. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...