3839 matches found
SUSE-SU-2020:0856-1 Security update for SUSE Manager Server 3.2
This update fixes the following issues: py26-compat-salt: - Replace pycrypto with M2Crypto as dependency for SLE15+ bsc1165425 redstone-xmlrpc: - Disable external entity parsing 1790381, bsc1164120, CVE-2020-1693 - Do not download external entities 1555429, bsc1085414, CVE-2018-1077 spacecmd: -...
UBUNTU-CVE-2020-8833
Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protectedsymlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash...
CVE-2020-11469
Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process with the user's privileges to obtain root access by replacing runwithroot...
CVE-2020-7599
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is public...
SUSE-SU-2020:0762-1 Security Beta update for Salt
This update fixes the following issues: salt: - Requiring python3-distro only for openSUSE/SLE = 15 - Use full option name instead of undocumented abbreviation for zypper - Python-distro is only needed for Python 3.7. Removing it for Python 2 - Fixed a local privilege escalation to root bsc115746...
CVE-2020-6646
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Disclaimer Description of a Replacement Message...
CVE-2020-6646: Improper Neutralization of Input During Web Page Generation
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Disclaimer Description of a Replacement Message...
Servicing stack update for Windows Server 2012: March 10, 2020
Servicing stack update for Windows Server 2012: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your devic...
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: March 10, 2020
Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stac...
Description of the security update for Office 2010: March 10, 2020
Description of the security update for Office 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...
Description of the security update for Office Online Server: March 10, 2020
None None...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...
Servicing stack update for Windows 10, version 1803: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1607: March 10, 2020
None None...
Servicing stack update for Windows 10, version 1903 and 1909: March 10, 2020
None None...
Loyalty Cards Targeted in Tesco Clubcard Attack
U.K. supermarket giant Tesco is warning on a credential-stuffing attack that potentially affects 600,000 members of its Clubcard loyalty program. It said that it detected cybercriminals trying out different name and password combos, gleaned from a database of stolen usernames and passwords for...
Intelbras Wireless N 150Mbps WRN240 Authentication Bypass
Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras Wireless N 150Mbps - WRN240 Tested on: linux,...
PT-2020-20302
Name of the Vulnerable Software and Affected Versions CardGate Payments plugin for WooCommerce versions through 3.1.15 Description The issue is related to a lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php. This allows an attacker to remotely replace...