Description of the security update for Outlook 2013: April 13, 2021 (KB4504733)

Description of the security update for Outlook 2013: April 13, 2021 KB4504733 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28452. Note: To apply this...

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB5001878)

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB5001878 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

KB5001639: March 9, 2021 update causes Windows 7 SP1 and Server 2008 R2 SP1 to not print graphical content

KB5001639: March 9, 2021 update causes Windows 7 SP1 and Server 2008 R2 SP1 to not print graphical content Summary This update resolves the following issue: Addresses an issue that fails to print the graphical content in a document after installing the March 9, 2021 update. Known issues in this...

Security update for kernel-firmware (important)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2021:0407-1 Rating: important References: 1181720 1181735 1181736 1181738 Cross-References: CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373 CVSS scores: CVE-2020-12362 NVD : 7.8...

SUSE SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2021:0769-1)

This update for openssl-100 fixes the following issues : CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 CVE-2021-23841: Fixed a NULL pointer dereference in X509issuerandserialhash bsc1182331 Note that Tenable Network Security has extracted the preceding description block...

Microsoft PowerPoint 2013 SP1 RCE Vulnerability (KB4493227)

This host is missing an important security update according to Microsoft KB4493227. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Visio 2013 SP1 Security Feature Bypass Vulnerability (KB4486673)

This host is missing an important security update according to Microsoft KB4486673. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Windows Event Tracing 安全漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing. The following products and editio...

BlueCMS v1.6 sp1 Has Arbitrary File Deletion Vulnerability

bluecms is an application for local classifieds portal system , the development language architecture is php + mysql architecture. BlueCMS v1.6 sp1 there are arbitrary file deletion vulnerability, attackers can use the vulnerability to achieve arbitrary file deletion...

Microsoft .NET Framework Denial of Service Vulnerability (KB4603002)

This host is missing an important security update according to Microsoft KB4603002 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4603002)

Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB4603002 Notice Revised 6/8/2021 On June 8th, 2021, this update was released to replace a previous update to address a “revocation server was...

Microsoft Windows Fax Service Security Vulnerability

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify fax settings, including how to send, receive, view, and print. A security vulnerability exists in Microsoft Windows Fax Service. The following products and editions are affected:...

Siemens DIGSI 4

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: DIGSI 4 Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a low privileged attacker to execute arbitrary code with SYSTEM...

CVE-2021-25242

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS, OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information...

CVE-2021-25245

An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings informaiton...

CVE-2021-25246

An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration...

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

CVE-2021-25232

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database...

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

CVE-2021-25238

An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port...