13315 matches found
Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules
Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...
July 11, 2023—KB5028186 (OS Build 10240.20048) - EXPIRED
None None...
July 11, 2023—KB5028222 (Monthly Rollup)
None None...
Internet Explorer help
None None...
July 11, 2023—KB5028226 (Security-only update)
None None...
July 11, 2023—KB5028166 (OS Builds 19044.3208 and 19045.3208) - EXPIRED
None None...
July 11, 2023—KB5028240 (Monthly Rollup)
None None...
Security Updates for Microsoft SharePoint Server 2019 (July 2023)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions...
Security Updates for Microsoft Visual Studio Products (July 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A vulnerability exist in ASP.NET Core applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics 365 on prem. A malicious party could exploit the vulnerabilities to launch a Cross-site scripting attack. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access to sensitive data in the context of th...
Security Updates for Outlook (July 2023)
The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-33151 - A...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2023)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security featur...
Security Updates for Microsoft SharePoint Server 2016 (July 2023)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-33159 ...
KB5028264: Servicing stack update for Windows Server 2008 R2 SP1: July 11, 2023
KB5028264: Servicing stack update for Windows Server 2008 R2 SP1: July 11, 2023 IMPORTANT As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. For customers who need additional time to upgrade and modernize their devices...
Security Updates for Microsoft Office Products (July 2023)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-33149, CVE-2023-33152,...
Vulnerabilities fixed in IBM DB2
IBM has fixed vulnerabilities in DB2. A malicious party can exploit the exploit the vulnerabilities to execute arbitrary code with privileges of the application, or to grant itself locally elevated privileges granted. IBM has released updates to fix the vulnerabilities in DB2. For more informatio...
Fedora 38 : perl-CPAN (2023-46924e402a)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-46924e402a advisory. Security fix for CVE-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CPAN 2.35 - Add...
Fedora 38 : python-managesieve (2023-51b4d898bb)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-51b4d898bb advisory. Fix use of ssl.wrapsocket CWE-295: Improper Certificate Validation Tenable has extracted the preceding description block directly from the Fedora security...
python38:3.8 and python38-devel:3.8 security update
babel 2.7.0-11 - Fix CVE-2021-20095 Resolves: rhbz1955615 Cython 0.29.14-4 - Exclude unsupported i686 arch modwsgi 4.6.8-4 - Core dumped upon file upload = 1GB Resolves: rhbz2125171 numpy 1.17.3-6 - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz1933055 python38...
Fedora 37 : dav1d (2023-652b6e8847)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-652b6e8847 advisory. Update to version 1.2.1. This version includes a fix for CVE-2023-32570 race condition that can lead to an application crash. Tenable has extracted...