13324 matches found
Security Updates for Microsoft Visual Studio Products (November 2020)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a tampering vulnerability. The vulnerability exists when the Python Tools for Visual Studio creates the python27 folder. An attacker who successfully exploited this vulnerability could run processe...
Photon OS 3.0: Mysql PHSA-2020-3.0-0160
An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142657;...
Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (November 2020)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by unspecified remote code execution vulnerabilities. An attacker can use a specially crafted Office file to exploit these vulnerabilities. CVE-2020-17064, CVE-2020-17065 C Tenabl...
Photon OS 3.0: Apache PHSA-2020-3.0-0161
An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142655;...
Photon OS 2.0: Mysql PHSA-2020-2.0-0294
An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142653...
Security Updates for Microsoft Dynamics 365 (on-premises) (November 2020)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities. An authenticated, remote attacker could exploit this, by sending a specially crafted request to an affected Dynamics server. The attacker who...
Microsoft Releases November 2020 Security Updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Microsoft’s...
Photon OS 2.0: Libarchive PHSA-2020-2.0-0294
An update of the libarchive package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Citrix ShareFile StorageZones Controller Multiple Security Updates
Description of Problem Two security issues have been identified within Citrix ShareFile StorageZones Controller that, if exploited, could allow a compromised or malicious ShareFile user to write arbitrary files as that Active Directory user to the local file system, and also to discover the full...
Fedora 32 : 3:mariadb / galera / mariadb-connector-c (2020-b995eb2973)
MariaDB 10.4.16 MariaDB Connector C/C++ 3.1.11 Galera 26.4.6 Release notes : https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/ Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora 33 : 3:mariadb / galera / mariadb-connector-c (2020-561eed63ef)
MariaDB 10.4.16 MariaDB Connector C/C++ 3.1.11 Galera 26.4.6 Release notes : https://mariadb.com/kb/en/mariadb-10416-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-3111-release-notes/ Note that Tenable Network Security has extracted the preceding description block directly from the...
Update Your iOS Devices Now — 3 Actively Exploited 0-Days Discovered
Apple on Thursday released multiple security updates to patch three zero-day vulnerabilities that were revealed as being actively exploited in the wild. Rolled out as part of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing...
HPSBHF03697 rev. 2 - Intel® PROSet/Wireless WiFi Software November 2020 Security Updates
Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® PROSet/Wireless WiFi products which may allow...
CentOS 7 : qemu-kvm (RHSA-2020:4079)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4079 advisory. - An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB...
Scientific Linux Security Update : xorg-x11-server on SL7.x x86_64 (20201104)
-- Security Fixes : - xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 - xorg-x11-server: Integer underflow in the X input extension protocol CVE-2020-14346 - xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability CVE-2020-14361 -...
Apple Releases Security Updates for Multiple Products
Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Apple...
Vulnerabilities fixed in Red Hat kernel
Red Hat has fixed vulnerabilities in its kernel. The vulnerabilities allow a locally authenticated malicious agent to the opportunity to cause a denial-of-service and obtain obtain system data. The vulnerability with attribute CVE-2020-12351 is a regression vulnerability of the vulnerability with...
About the security content of watchOS 7.1
About the security content of watchOS 7.1 This document describes the security content of watchOS 7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of watchOS 6.2.9
About the security content of watchOS 6.2.9 This document describes the security content of watchOS 6.2.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
RHEL 8 : thunderbird (RHSA-2020:4948)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4948 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.4.0. Security Fixes: Mozilla:...