MS16-149: Description of the security update for Windows: December 13, 2016

None None...

MS16-146: Description of the security update for Microsoft graphics component: December 13, 2016

None None...

MS16-134: Description of the security update for common log file system driver: November 8, 2016

None None...

MS16-130 and MS16-135: Description of the security update for Windows: November 8, 2016

None None...

MS16-135: Description of the security update for Windows kernel-mode drivers: November 8, 2016

None None...

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

foreman: API and UI actions/URLs not limited to the orgs/locations assigned

It was found that the foreman API and UI actions and URLs are not properly limited to the organizations and locations they were assigned to. This could allow an attacker to view and update other organizations and locations in the system that they should not be allowed to...

MS16-098: Description of the security update for Windows kernel-mode drivers: August 9, 2016

None None...

WordPress Post Gallery Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

MS16-082: Description of the security update for Windows Structured Query: June 14, 2016

None None...

MS16-070: Description of the security update for Word 2010: June 14, 2016

MS16-070: Description of the security update for Word 2010: June 14, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

MS16-070: Description of the security update for OneNote 2016: June 14, 2016

None None...

MS16-061: Description of the security update for RPC: May 10, 2016

None None...

MS16-029: Description of the security update for 2007 Microsoft Office Suite: March 8, 2016

None None...

WP-Invoice <= 4.1.0 - Multiple Vulnerabilities

WP-Invoice plugin = 4.1.0 contains multiple security vulnerabilities that include information disclosure, unauthorised updating of meta data, and privilege escalation...

WordPress Download Manager Plugin <= 2.8.7 - Multiple Vulnerabilities

This plugin is prone to privilege escalation, unauthenticated directory listings and unauthenticated post updating vulnerabilities. Solution Update the plugin...

MS16-005: Description of the security update for Windows kernel-mode drivers: January 12, 2016

None None...

Design/Logic Flaw

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...

CVE-2015-1342

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by 1 querying or 2 updating a cgroup...

Moderate: Red Hat Bug Fix Advisory: pcre bug fix update

Updated pcre packages that fix several bugs are now available for Red Hat Enterprise Linux 7. PCRE is a Perl-compatible regular expression library. This update fixes the following bugs: Previously, non-matched groups within capturing groups up to a forced match were not being properly reset by...