3184 matches found
Description of the security update for Office 2010: August 11, 2020
Description of the security update for Office 2010: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Access software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsof...
UBUNTU-CVE-2020-13295
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF...
CVE-2020-6012
ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...
PT-2020-18887 · Zonealarm · Zonealarm Anti-Ransomware
Name of the Vulnerable Software and Affected Versions: ZoneAlarm Anti-Ransomware versions prior to 1.0.713 Description: The issue allows a sophisticated timed attacker to replace files with malicious content, enabling an unprivileged user to escalate privileges via local access. This can be...
The vulnerability of the Configuration The Expedition Migration tool, which involves manipulating cross-site requests, allows a hacker to replace the user during a session and execute arbitrary code.
The vulnerability of the The Expedition Migration tool relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during an session and execute arbitrary code...
Description of the security update for SharePoint Enterprise Server 2013: July 14, 2020
None None...
Description of the security update for SharePoint Foundation 2013: July 14, 2020
Description of the security update for SharePoint Foundation 2013: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in PerformancePoint Services for SharePoint Server if the software does not check the source markup of XML file input. To learn...
Description of the security update for Project 2016: July 14, 2020
None None...
Description of the security update for Project 2010: July 14, 2020
Description of the security update for Project 2010: July 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 14, 2020
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 14, 2020 Applies to Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2012 R2 Windows Server 2012 R2 Server Core installation Summary This update makes quality improvements to the...
Servicing stack update for Windows 10, version 1607: July 14, 2020
None None...
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: July 14, 2020
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: July 14, 2020 Applies to Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service...
Description of the security update for SharePoint Foundation 2013: July 14, 2020
Description of the security update for SharePoint Foundation 2013: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for Word 2013: July 14, 2020
Description of the security update for Word 2013: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following Microsoft...
Servicing stack update for Windows 10, version 2004: July 14, 2004
None None...
Ledger SAS Live Code Issue Vulnerability
Ledger SAS Live is a cryptocurrency wallet product from the French company Ledger SAS. A security vulnerability exists in Ledger SAS Live versions prior to 2.7.0. Unprocessed Bitcoin's Replacement of Fees RBF, which increases a user's balance with the value of an unconfirmed transaction immediate...
The world is your authentication and identity oyster
This blog post is part of the Microsoft Intelligence Security Association guest blog series. To learn more about MISA, go here. The world is your authentication/identity oyster If you’re older than 10 years of age you’ve undoubtedly heard the phrase “The world is your oyster.” This basically mean...
cae input validation error vulnerability (CNVD-2021-25664)
cae is a compression/decompression software package. An input validation error vulnerability exists in the ExtractTo feature in all versions of cae, which stems from the program failing to properly escape the path to a file in a zip archive, and can be exploited by an attacker to add or replace...
UBUNTU-CVE-2020-7668
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...
Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms
With Flash Player’s Dec. 31, 2020 kill date quickly approaching, Adobe said that it will start prompting users to uninstall the software in the coming months. The End of Life EOL timeline has been a long time coming. Adobe first announced in July 2017 that it will no longer update or distribute...