9579 matches found
CVE-2018-7118
A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant SPP Bundled Software earlier than version 2018.09.0...
Description of the security update for Office 2010: April 9, 2019
Description of the security update for Office 2010: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when the Microsoft Office Access Connectivity Engine incorrectly handles objects in memory. To learn more about the vulnerability, see the...
Description of the security update for SharePoint Enterprise Server 2016: April 9, 2019
None None...
Description of the security update for SharePoint Enterprise Server 2013: April 9, 2019
None None...
Description of the security update for Excel 2013: April 9, 2019
Description of the security update for Excel 2013: April 9, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: April 9, 2019
Description of the security update for Office 2010: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office does not correctly handle certain files. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...
Description of the security update for Office 2013: April 9, 2019
Description of the security update for Office 2013: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office does not correctly handle certain files. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...
Microsoft Office Access Connectivity Engine CVE-2019-0823 Remote Code Execution Vulnerability
Description Microsoft Office Access Connectivity Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office...
WordPress Pipdig Power Pack plugin <= 4.7.3 - Vendor Backdoors & Suspicious Code
Vendor Backdoors & Suspicious Code found in WordPress Pipdig Power Pack plugin versions = 4.7.3. Solution Update the WordPress Pipdig Power Pack plugin to the latest available version at least 4.8.0...
Security Bulletin: Security vulnerabilities identified in OpenSSL affect Rational Build Forge (CVE-2018-0734, CVE-2018-5407 and CVE-2019-1559)
Summary OpenSSL has security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details This section includes the vulnerability details that affects the Rational Build Forg...
Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2019-0190; CVE-2018-17189; CVE-2018-17199)
Summary Apache HTTP Server has security vulnerabilities that allows a remote attacker to exploit the application. Respective security vulnerabilities are discussed in detail in the subsequent sections. Vulnerability Details This section includes the vulnerability details that affects the Rational...
Security Bulletin: Potential denial of service in WebSphere Application Server Admin Console (CVE-2019-4080)
Summary There is a potential denial of service in the Admin Console of WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4080 DESCRIPTION: IBM WebSphere Application Server Admin Console is vulnerable to a potential denial of service, caused by improper parameter parsing. A remot...
CVE-2019-7611
A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the aliases, shrink, or split endpoints are used . If the elasticsearch.yml file has xpack.security.dlsfls.enabled set to false, certain permission...
Immunity Canvas: CONFLUENCE_MACRO_LFI
Name| confluencemacrolfi ---|--- CVE| CVE-2019-3396 Exploit Pack| CANVAS Description| Confluence Server and Data Center - LFI CVE-2019-3396 Notes| Repeatability: NOTES: A Default behavior =================== By default, this module attempts to automatically locate and then fetch the confluence...
Design/Logic Flaw
A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....
CVE-2019-7610
CVE-2019-7610 affects Kibana versions before 6.6.1. The flaw is an arbitrary code execution in the security audit logger when xpack.security.audit.enabled is true, allowing a crafted request to run JavaScript with Kibana process privileges on the host. Connected advisories indicate OpenShift 4.1....
CVE-2015-1014
A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....
Security Bulletin: Potential denial of service in WebSphere Application Server (CVE-2018-10237)
Summary There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArra...
Imperva Cloud WAF and Graylog, Part II: How to Collect and Ingest SIEM Logs
This guide gives step-by-step guidance on how to collect and parse Imperva Cloud Web Application Firewall WAF, formerly Incapsula logs into the Graylog SIEM tool. Read Part I to learn how to set up a Graylog server in AWS and integrate with Imperva Cloud WAF. This guide assumes: You have a clean...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Rational ClearCase (CVE-2018-3180, CVE-2018-3139)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 6, 7, and 8, which are used by IBM Rational ClearCase. These issues were disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: A flaw in the JSSE...