Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23046)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23046 advisory. - Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a deni...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an...

Security Updates for Microsoft Office Products (Nov 2023) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the november-14-2023 advisory. - Microsoft Excel Security Feature Bypass Vulnerability CVE-2023-36037 - Microsoft Excel Remote Code Execution Vulnerability CVE-2023-36041 ...

Security Updates for Microsoft Excel Products (November 2023)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-36041 - A security feature bypass...

Security Updates for Microsoft SharePoint Server 2016 (November 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23055)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23055 advisory. - Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23050)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23050 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network acces...

Zoom Client for Meetings < 5.15.10 Vulnerability (ZSB-23048)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23048 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network...

Vulnerabilities fixed in Microsoft System Center

Microsoft has fixed vulnerabilities in System Center. A malicious party could exploit the vulnerabilities to gain elevated permissions or gain access to sensitive data. For successful abuse, the malicious party needs local access. Open Management Infrastructure:...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23052)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23052 advisory. - Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23049)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23049 advisory. - Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23050)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23050 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access...

Security Updates for Azure CLI (November 2023)

The Azure CLI is missing security updates. It is, therefore, affected by an Information Disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23052)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23052 advisory. - Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information...

KB5032309: Servicing stack update for Windows Server 2012: November 14, 2023

KB5032309: Servicing stack update for Windows Server 2012: November 14, 2023 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date...

KB5032308: Servicing stack update for Windows Server 2012 R2: November 14, 2023

KB5032308: Servicing stack update for Windows Server 2012 R2: November 14, 2023 REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading the...

KB5032384: Servicing stack update for Windows Server 2008 SP2: November 14, 2023

KB5032384: Servicing stack update for Windows Server 2008 SP2: November 14, 2023 REMINDER Windows Server 2008 SP2 Extended Security Updates third and final year of ESU ended on January 10, 2023. Many customers are taking advantage of Azures commitment to security and compliance and have moved to...

KB5032383: Servicing stack update for Windows Server 2008 R2 SP1: November 14, 2023

KB5032383: Servicing stack update for Windows Server 2008 R2 SP1: November 14, 2023 REMINDER As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported version of Windows.Upgrade to...

runc security update

4:1.1.9-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.1.9 - Related: 2176063 4:1.1.8-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.1.8 - Related: 2176063 4:1.1.7-2 - rebuild for following CVEs: CVE-2021-43784 CVE-2022-41724 CVE-2023-28642 - Resolves:...

grafana security and enhancement update

9.2.10-7 - bump release number for rebuild with fixed gating.yaml file 9.2.10-6 - resolve RHEL-12665 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date mismatch 9.2.10-5 - resolve CVE-2023-3128...