13301 matches found
Vulnerability fixed in Microsoft Azure
Microsoft has fixed a vulnerability in Azure Migrate. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access sensitive data in the context of the victim's browser of...
Security Updates for Microsoft Office Products C2R (May 2024)
The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability: - Microsoft Excel is affected by a remote code execution vulnerability. CVE-2024-30042 Note that Nessus has not tested for this issue but has instead relied only on the...
Oracle Linux 9 : .NET / 7.0 (ELSA-2024-2843)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2843 advisory. 7.0.119-1.0.1 - Add OracleLinux support Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Excel and Sharepoint. A malicious party can exploit the vulnerabilities to execute arbitrary code execute with the victim's privileges, or gain access to sensitive data. Successful exploitation requires the malicious party to trick the victim into opening a...
Microsoft and Adobe Patch Tuesday, May 2024 Security Update Review
Microsoft has released its May edition of Patch Tuesday. Lets take a deep dive into the crucial insights from Microsofts Patch Tuesday updates for May 2024. Microsoft Patch Tuesday for May 2024 Microsoft Patch Tuesdays May 2024 edition addressed 67 vulnerabilities, including one critical and 59...
Apple Releases Security Updates for Multiple Products
Apple has released security updates to address vulnerabilities in Safari, iOS, iPadOS, macOS, watchOS, and tvOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisories and...
Microsoft Releases May 2024 Security Updates
Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisory and apply the necessary updates...
May 14, 2024—KB5037800 (Monthly Rollup)
None None...
May 14, 2024—KB5037778 (Monthly Rollup)
None None...
May 14, 2024—KB5037763 (OS Build 14393.6981) - EXPIRED
None None...
May 14, 2024—KB5037768 (OS Builds 19044.4412 and 19045.4412) - EXPIRED
None None...
May 14, 2024—KB5037771 (OS Builds 22621.3593 and 22631.3593)
None None...
KLA67396 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2024-30048 CVE-2024-30047 Related products Microsoft-Dynamics-365 CVE list CVE-2024-30048 warning CVE-2024-30047 warning Solution Install...
May 14, 2024-KB5038283 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019
None None...
May 14, 2024-KB5038282 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022
None None...
Security Updates for Microsoft SharePoint Server 2016 (May 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
RHEL 9 : .NET 8.0 (RHSA-2024:2842)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2842 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
Intel® BIOS Guard and PPAM Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® BIOS Guard and Platform Properties Assessment Module PPAM firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28402 Descriptio...
Intel® Ethernet Adapters and Intel® Ethernet Controller I225 Advisory
Summary: Potential security vulnerabilities in some Intel® Ethernet Controller I225 Manageability firmware may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...