13331 matches found
SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1596-1)
The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an...
Security Updates for Microsoft Skype for Business (May 2021)
The Microsoft Skype for Business installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-26421 - A...
Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 3
Package name:xms10.13.0.10329.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces:xms10.13.0.10129.bin and xms10.13.0.10212.bin Date:May 2021 Languages supported:English US Important notes about this update As a best practice, Citrix recommends that you install this and...
Ubuntu 21.04 : Linux kernel vulnerabilities (USN-4950-1)
The remote Ubuntu 21.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4950-1 advisory. Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring...
Vulnerabilities fixed in Adobe products
Adobe has released security updates for Adobe Acrobat Reader and Adobe Acrobat DC for Windows and macOS. These updates fix multiple critical and important vulnerabilities. Successful misuse can lead to execution of arbitrary code in the context of the current user, obtaining elevated privileges...
Security Updates for Microsoft Office (May 2021) (macOS)
The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability in Excel. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Security Updates for Microsoft Visual Studio Products (May 2021)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the multiple vulnerabilities, including the following: - A remote code execution vulnerability exists in Visual Studio. An unauthenticated, remote attacker can exploit this to bypass authentication a...
May 11, 2021—KB5003208 (Monthly Rollup)
None None...
May 11, 2021—KB5003169 (OS Build 18363.1556)
None None...
May 11, 2021—KB5003171 (OS Build 17763.1935)
None None...
Juniper Networks Releases Security Updates
Juniper Networks has released security updates to address multiple vulnerabilities in various Juniper products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Juniper's 2021-05 Out-of-Cycle Security...
Security Updates for Microsoft Excel Products (May 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-31175, CVE-2021-31177,...
Adobe Releases Security Updates for Multiple Products
Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Adobe’s Security Bulletins and apply the necessary updates...
Security Updates for Microsoft Sharepoint 2016 (May 2021)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...
APSB21-30 Security updates available for Magento
Successful exploitation could lead to unauthorized access to restricted resources. Magento has released updates for Magento Commerce and Magento Open Source editions. These updates resolve vulnerabilities rated important and moderate. Successful exploitation could lead to arbitrary code execution...
Security Updates for Microsoft SharePoint Server 2019 (May 2021)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...
Security Updates for Microsoft SharePoint Foundation Server 2013 (May 2021)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...
Security Updates for Microsoft Office Web Apps (May 2021)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Citrix Releases Security Updates for Workspace App for Windows
Citrix has released security updates to address a vulnerability in Citrix Workspace App for Windows. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Citrix Security Update CTX307794 and apply the necessary...
Vulnerabilities fixed in Google Chrome for desktop
Vulnerabilities have been fixed in Google Chrome for desktop. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Access to system data As usual, Google makes few...