Security Updates for Microsoft Office Products (Mar 2023) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Excel Remote Code Execution Vulnerability CVE-2023-23399 - Windows Graphics Component Elevation of Privilege Vulnerability CVE-2023-24910 Note...

Vulnerabilities fixed in Aveva products

Aveva has fixed vulnerabilities in inTouch, PlantScada and Telemery Server. A malicious party could exploit the vulnerabilities to carry out attacks that could result in the following categories of damage: Denial-of-Service DoS Data manipulation. Remote code execution User rights Access to system...

Vulnerabilities fixed in Microsoft Visual Studio

Microsoft has fixed vulnerabilities in Visual Studio. The vulnerabilities are located in the git code used by Visual Studio used and allow a malicious party to access gain access to sensitive data, or to execute arbitrary code execute code with the victim's privileges. Because Visual Studio is a...

Fedora 38 : vim (2023-ccf283d7e1)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ccf283d7e1 advisory. The newest upstream patchlevel 1367 Security fix for CVE-2023-1127 Tenable has extracted the preceding description block directly from the Fedora...

March 14, 2023—KB5023759 (Security-only update)

None None...

March 14, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002366)

None None...

March 14, 2023—KB5023769 (Monthly Rollup)

None None...

March 14, 2023—KB5023756 (Monthly Rollup)

None None...

March 14, 2023—KB5023755 (Monthly Rollup)

None None...

March 14, 2023—KB5023754 (Security-only update)

None None...

KLA48561 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in Microsoft Dynamics 365 on-premises can be exploited...

KB5023791: Servicing stack update for Windows Server 2012: March 14, 2023

KB5023791: Servicing stack update for Windows Server 2012: March 14, 2023 IMPORTANT For Windows Server 2012, the end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS date...

KB5023788: Servicing stack update for Windows Server 2016: March 14, 2023

None None...

Security Updates for Microsoft Office Web Apps (March 2023)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...

Security Updates for Microsoft SharePoint Server Subscription Edition (March 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

KB5023790: Servicing stack update for Windows Server 2012 R2: March 14, 2023

KB5023790: Servicing stack update for Windows Server 2012 R2: March 14, 2023 REMINDERWindows 8.1 reached end of support on January 10, 2023, at which point technical assistance and software updates is no longer provided. If you have devices running Windows 8.1, we recommend upgrading them to a mo...

Security Updates for Microsoft Visual Studio Products (March 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its...

Security Updates for Microsoft Office Products (March 2023)

The Microsoft Office Products are missing security updates. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Security Updates for Microsoft Excel Products (March 2023)

The Microsoft Excel Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-23398 - A remote code execution...

Fedora 38 : cairo / freetype / harfbuzz / qt6-qtwebengine (2023-a48406ecd2)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a48406ecd2 advisory. Security fix for CVE-2023-25193 Update of HarfBuzz to 7.0.1 version 2169172 Update of freetype to 2.13.0 version 2168496 ---- Security fix for...