3193 matches found
Security advisory YSA-2019-02 | Yubico
Who should read this advisory? Customers, IT Managers, or FIPS Crypto Officers who use or manage YubiKey FIPS Series devices. An issue exists in YubiKey FIPS Series devices, versions 4.4.2 and 4.4.4 please note, there is no released firmware version 4.4.3. , where the first set of random values...
Description of the security update for Office 2013: February 12, 2019
Description of the security update for Office 2013: February 12, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following:...
Description of the security update for SharePoint Foundation 2010: February 12, 2019
Description of the security update for SharePoint Foundation 2010: February 12, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the security update for Word Viewer: February 12, 2019
None None...
Description of the security update for Office 2010: February 12, 2019
Description of the security update for Office 2010: February 12, 2019 Summary This security update resolves an information disclosure vulnerability that exists when Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the information disclosure vulnerability, see...
Servicing stack update for Windows Server 2016 version 1709 and Windows 10 version 1709: February 12, 2019
None None...
CVE-2019-7323
GUP generic update process in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the...
Security Bulletin: IBM ToolsCenter Suite is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)
Summary Security vulnerabilities have been discovered in OpenSSL. Description: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTL Vulnerability Details Abstract Security vulnerabilities have been discovered in OpenSSL. Content Vulnerability...
The vulnerability of the Mozilla Firefox browser, related to insufficient validation of input data when using full-screen mode, allows attackers to perform spoofing attacks.
The vulnerability of the Mozilla Firefox browser is related to insufficient validation of input data when using full-screen mode. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by replacing the page or URI...
Compatibility update for upgrading to Windows 10, version 1803: January 15, 2019
None None...
Description of the security update for SharePoint Foundation 2013: January 8, 2019
Description of the security update for SharePoint Foundation 2013: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the security update for SharePoint Enterprise Server 2013: January 8, 2019
None None...
Description of the security update for Office Online Server: January 8, 2019
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019
Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...
Description of the security update for Office 2010: January 8, 2019
Description of the security update for Office 2010: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Missing Origin Validation in webpack-dev-server
Versions of webpack-dev-server before 3.1.10 are missing origin validation on the websocket server. This vulnerability allows a remote attacker to steal a developer's source code because the origin of requests to the websocket server that is used for Hot Module Replacement HMR are not validated...
GHSA-CF66-XWFP-GVC4 Missing Origin Validation in webpack-dev-server
Versions of webpack-dev-server before 3.1.10 are missing origin validation on the websocket server. This vulnerability allows a remote attacker to steal a developer's source code because the origin of requests to the websocket server that is used for Hot Module Replacement HMR are not validated...
Fedora 29 : python-markdown2 (2018-6a8028084d)
python-markdown2 2.3.6 - pull 282 Add TOC depth option - pull 283 Fix to add TOC html to output via CLI - pull 284 Do not remove anchors in safemode - pull 288 fixing cuddled-lists with a single list item - pull 292 Fix Wrong rendering of last list element - pull 295 link-patterns fix - pull 300...
The vulnerability of the SUSE Linux SMT subscription management software, related to deficiencies in authentication procedures, allows a perpetrator to replace the server.
The vulnerability of the SUSE Linux Subscription Management Tool SMT is related to deficiencies in the authentication process when the HOST header is used. Exploiting this vulnerability could allow a malicious actor to remotely replace the server...
Mobile Menace Monday: Is Fuchsia OS the end of Android?
It’s no secret that every year Google announces a new Android version. This time though, recent Google documents state that the next major Android version will be Android Q and not Android 9.1 Pie. In parallel, Google is also developing an operating system called Fuchsia that’s supposedly going t...