1282 matches found
Remote code execution
Skype for Business and Lync Remote Code Execution Vulnerability...
CVE-2022-33633
CVE-2022-33633 affects Microsoft Skype for Business Server and Microsoft Lync Server (remote code execution). Connected sources reference an input-validation related RCE in Skype/Lync Server components and note affected products include Skype for Business Server 2019 CU6, Server 2015 CU12, and Ly...
CVE-2022-33633 Skype for Business and Lync Remote Code Execution Vulnerability
...
CVE-2022-33633 Skype for Business and Lync Remote Code Execution Vulnerability
...
Description of the security update for Skype for Business Server and Lync Server: July 12, 2022 (KB5016714)
Description of the security update for Skype for Business Server and Lync Server: July 12, 2022 KB5016714 Summary This security update resolves a remote code execution vulnerability in Microsoft Skype for Business Server and Microsoft Lync Server. To learn more about these vulnerabilities, see...
Skype for Business and Lync Remote Code Execution Vulnerability
...
Vulnerabilities fixed in Microsoft Office, Skype and Lync
Microsoft has fixed vulnerabilities in Microsoft Office, Skype and Lync. A malicious party could potentially exploit the vulnerabilities to bypass a security measure or execute arbitrary code. Skype for Business and Microsoft Lync: |----------------|------|-------------------------------------| |...
Microsoft Skype for Business Server输入验证错误漏洞
Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft Corporation USA that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. An input validation error vulnerability exists in...
PT-2022-3839 · Microsoft · Lync Server +1
Name of the Vulnerable Software and Affected Versions: Skype for Business Server and Microsoft Lync Server affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to execute arbitrary code in the target system...
KLA12584 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Skype for Business and Lync can be exploited...
Security Updates for Microsoft Skype for Business and Microsoft Lync (July 2022)
The Microsoft Skype for Business or Microsoft Lync installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized...
GHSA-GVMR-MP5Q-9WVW Plaintext Storage of a Password in Jenkins Skype notifier Plugin
Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file hudson.plugins.skype.im.transport.SkypePublisher.xml on the Jenkins controller as part of its configuration. This password can be viewed by users with access to the Jenkins controller file syste...
Plaintext Storage of a Password in Jenkins Skype notifier Plugin
Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file hudson.plugins.skype.im.transport.SkypePublisher.xml on the Jenkins controller as part of its configuration. This password can be viewed by users with access to the Jenkins controller file syste...
CVE-2022-34805
Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-34805
Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-34805
Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-34805
Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2022-34805
CVE-2022-34805 affects Jenkins Skype notifier Plugin versions 1.1.0 and earlier. The vulnerability is due to a password stored in plaintext in the plugin’s global configuration on the Jenkins controller, which can be viewed by anyone with filesystem access to the controller. Some sources specify ...
PT-2022-22357 · Jenkins · Jenkins Skype Notifier Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Skype notifier Plugin versions 1.1.0 and earlier Description: The issue concerns the storage of a password in an unencrypted form within the global configuration file on the Jenkins controller. This password is stored in the file...
Jenkins Plugin Skype notifier 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...