54 matches found
Getting the most value out of your security deployment
This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blog Now that y...
Description of the security update for Office 2010: May 8, 2018
Description of the security update for Office 2010: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Excel Viewer 2007: April 10, 2018
Description of the security update for Excel Viewer 2007: April 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Commo...
Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018
None None...
End of support for Office 2007
End of support for Office 2007 Support for Office 2007 ended on October 10, 2017. All of your Office 2007 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks. Upgrade to a newer version of Office so you can stay up to date with all...
Description of the security update for SharePoint Server 2013: September 12, 2017
Description of the security update for SharePoint Server 2013: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the security update for Outlook 2007: September 19, 2017
Description of the security update for Outlook 2007: September 19, 2017 Summary This update provides defense-in-depth changes to help improve security in Microsoft Outlook 2007. To learn more about these vulnerabilities, see Advisory ADV170015. Note To apply this security update, you must have th...
Description of the security update for Office 2010: July 11, 2017
Description of the security update for Office 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Alcatel Lucent Omnivista 8770 RCE Vulnerability - Active Check
Alcatel Lucent Omnivista 8770 is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Authentication flaw
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...
CVE-2016-9796
The CVE-2016-9796 issue affects Alcatel-Lucent OmniVista 8770 (versions 2.0–3.0). The root cause is an authentication bypass that allows an attacker to query GIOP interfaces over TCP port 30024 and invoke methods (AddJobSet, AddJob, ExecuteNow) to run arbitrary commands with NT AUTHORITY\SYSTEM p...
CVE-2016-9796
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...
MS16-081: Security Update for Active Directory: June 14, 2016
None None...
JDK: unspecified vulnerability fixed in 6u95, 7u79 and 8u45 (Deployment)
Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...