CVE-2025-47908

A flaw was found in github.com/rs/cors. The middleware exhibits excessive heap memory allocation when handling preflight requests containing a lengthy, comma-separated value in the Access-Control-Request-Headers ACRH header. This vulnerability allows an attacker to send a specially crafted HTTP...

Description of the security update for SharePoint Server Subscription Edition: April 8, 2025 (KB5002705)

None None...

Description of the security update for Excel 2016: March 11, 2025 (KB5002696)

None None...

io.quarkus:quarkus-amazon-lambda (0.13.0), io.quarkus:quarkus-amazon-lambda-deployment (0.13.0) +8 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.13.0)

io.quarkus:quarkus-resteasy MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-amazon-lambda 0.13.0 - io.quarkus:quarkus-amazon-lambda-deployment 0.13.0 -...

io.quarkus:quarkus-elytron-security-deployment (0.17.0), io.quarkus:quarkus-keycloak-deployment (0.17.0) +10 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.17.0)

io.quarkus:quarkus-resteasy MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.17.0 - io.quarkus:quarkus-keycloak-deployment 0.17.0 -...

io.quarkus:quarkus-elytron-security-deployment (0.18.0), io.quarkus:quarkus-keycloak-deployment (0.18.0) +16 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.18.0)

io.quarkus:quarkus-resteasy MAVEN version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.18.0 - io.quarkus:quarkus-keycloak-deployment 0.18.0 -...

Description of the security update for SharePoint Server 2019: April 9, 2024 (KB5002580)

None None...

io.quarkus:quarkus-elytron-security-deployment (0.13.3), io.quarkus:quarkus-resteasy (0.13.3) +21 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (0.13.3)

io.quarkus:quarkus-undertow MAVEN version 0.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.13.3 - io.quarkus:quarkus-resteasy 0.13.3 -...

Description of the security update for Publisher 2013: August 8, 2023 (KB5002391)

Description of the security update for Publisher 2013: August 8, 2023 KB5002391 Summary This security update for Microsoft Office provides defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV230003. Note: To apply th...

Description of the security update for Outlook 2013: July 11, 2023 (KB5002432)

Description of the security update for Outlook 2013: July 11, 2023 KB5002432 Summary This security update resolves a Microsoft Outlook spoofing vulnerability, and Microsoft Outlook security feature bypass vulnerability. To learn more about the vulnerabilities, see the following security advisorie...

End of support for Office 2016 and Office 2019

None None...

Description of the security update for Office 2016: July 11, 2023 (KB4475581)

None None...

Maximizing Performance with Wallarm Filtering Nodes in Amazon’s Global Infrastructure

Introduction In todays digital landscape, ensuring the security and performance of web applications is paramount. To achieve optimal protection against cyber threats, organizations deploy web application and API protection WAAPs like Wallarm. However, to truly leverage the benefits of Wallarm,...

Description of the security update for SharePoint Foundation 2013: March 14, 2023 (KB5002367)

Description of the security update for SharePoint Foundation 2013: March 14, 2023 KB5002367 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​Microsoft Common Vulnerabilities and Exposures CVE-2023-23395...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.alpha2), io.quarkus:quarkus-azure-functions-http-deployment (1.3.0.alpha2) +30 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.3.0.alpha2)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.3.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.3.0.alpha2 -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.9.1.final), io.quarkus:quarkus-azure-functions-http-deployment (1.9.1.final) +34 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.9.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.9.1.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.1.final), io.quarkus:quarkus-azure-functions-http-deployment (1.10.1.final) +34 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.10.1.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.10.1.final -...

io.quarkus:quarkus-amazon-lambda-http-deployment (1.11.5.final), io.quarkus:quarkus-azure-functions-http-deployment (1.11.5.final) +51 more potentially affected by CVE-2022-4116 via io.quarkus:quarkus-vertx-http-deployment (1.11.5.final)

io.quarkus:quarkus-vertx-http-deployment MAVEN version 1.11.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http-deployment and may be impacted: - io.quarkus:quarkus-amazon-lambda-http-deployment 1.11.5.final -...

Description of the security update for Office 2016: November 8, 2022 (KB3191869)

None None...

Description of the security update for Visio 2013: September 13, 2022 (KB5002017)

Description of the security update for Visio 2013: September 13, 2022 KB5002017 Summary This security update resolves a Microsoft Office Visio remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-38010. Note: To...