Photon OS 1.0: Python PHSA-2020-1.0-0307

An update of the python package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0307. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13851...

Photon OS 1.0: Apache PHSA-2020-1.0-0308

An update of the apache package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13851...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities affecting multiple products. An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

Vulnerabilities fixed in Oracle Java SE

Oracle has fixed vulnerabilities in Oracle Java SE. A malicious party could exploit the vulnerabilities to execute arbitrary code or for causing a denial-of-service. ------------------.------.------------------------------------- | CVE ID | CVSS | Vector |...

Photon OS 1.0: Net PHSA-2020-1.0-0308

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138517;...

Security Updates for Microsoft SharePoint Server (July 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token...

July 14, 2020—KB4565540 (Security-only update)

None None...

July 14, 2020—KB4565511 (OS Build 14393.3808)

None None...

July 14, 2020—KB4565489 (OS Build 17134.1610)

None None...

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...

Serious vulnerabilities fixed in SAP Netweaver

SAP has fixed several vulnerabilities in SAP Netweaver products. The vulnerabilities allow malicious parties to gain access to sensitive data, or possibly even the execute arbitrary commands that could take over the entire underlying system can be taken over. The vulnerability with reference...

Google Releases Security Updates for Chrome

Google has released Chrome version 84.0.4147.89 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Security Updates for Microsoft Word Products (July 2020)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...

Microsoft Releases July 2020 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review...

Security Updates for Microsoft Visual Studio Products (July 2020)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Visual Studio when the software fails to check the source markup of XML file input. An attacker who successfully exploited...

Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (July 2020)

The Microsoft Team Foundation Server or Azure DevOps Server is missing security updates. It is, therefore, affected by a cross-site scripting XSS vulnerability due to not properly sanitizing user-provided input. An authenticated, remote attacker can exploit this by sending a specially-crafted...

Photon OS 1.0: Kibana PHSA-2020-1.0-0306

An update of the kibana package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0306. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13844...

Photon OS 1.0: Nodejs PHSA-2020-1.0-0306

An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0306. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13844...

Photon OS 1.0: Atftp PHSA-2020-1.0-0306

An update of the atftp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0306. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138441...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...