CVE-2017-2706

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...

PT-2017-15493

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 smartphones with software MHA-AL00AC00B125 Description The issue is related to a directory traversal vulnerability in the Push module. This occurs because the system does not verify the file name during decompression, allowing...

CVE-2017-2706: Improper Limitation of a Pathname to a Restricted Directory

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...

CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

DEBIAN-CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

CVE-2017-8814

CVE-2017-8814 affects MediaWiki language converter. Versions affected: before 1.27.4, before 1.28.3 in 1.28.x, and before 1.29.2 in 1.29.x. The vulnerability allows replacing text inside tags via a rule definition followed by a large amount of junk. Remediation across sources points to upgrading ...

PT-2017-18548

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.27.4 MediaWiki versions 1.28.x prior to 1.28.3 MediaWiki versions 1.29.x prior to 1.29.2 Description The issue allows attackers to replace text inside tags by utilizing a rule definition followed by excessive...

CVE-2017-8814: Improper Input Validation

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."...

Description of the security update for Word Viewer: November 14, 2017

None None...

End of support for Office 2007

End of support for Office 2007 Support for Office 2007 ended on October 10, 2017. All of your Office 2007 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks. Upgrade to a newer version of Office so you can stay up to date with all...

Description of the security update for 2007 Microsoft Office Suite: November 28, 2017

None None...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: November 14, 2017 (KB4011205)

None None...

tomcat: Security constrained bypass in error page mechanism

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...

How To Replace Defective SSD/HDD of a NetScaler SD-WAN 4000 or 5000 Appliance

This article describes how to replace defective SSD/HDD of a NetScaler SD-WAN 4000 or 5000 appliance...

October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows Server 2012 (KB 4043769)

October 2017 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows Server 2012 KB 4043769 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 update...

CVE-2014-7851

Vulnerability CVE-2014-7851 affects oVirt 3.2.2–3.5.0 where restapi sessions are not invalidated after logout from webadmin, enabling remote authenticated users who know another user’s session data to assume that user’s privileges by swapping session tokens. Root cause: restapi session not invali...