1706 matches found
May 12, 2020—KB4556807 (OS Build 17134.1488)
None None...
Mitigating vulnerabilities in endpoint network stacks
The skyrocketing demand for tools that enable real-time collaboration, remote desktops for accessing company information, and other services that enable remote work underlines the tremendous importance of building and shipping secure products and services. While this is magnified as organizations...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: April 14, 2020
None None...
April 14, 2020—KB4550957 (Security-only update)
None None...
Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020
Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020 This update addresses a vulnerability that is related to the NAVRecordState state. To learn more about the vulnerability, go to CVE-2020-1022. How to obtain and install the update Microsoft Download Center The...
April 14, 2020—KB4550951 (Monthly Rollup)
None None...
Description of the security update for Office Online Server: April 14, 2020
None None...
Description of the security update for SharePoint Server 2019 Language Pack: April 14, 2020
None None...
KB4550965: Windows 7 and Windows Server 2008 R2 April 2020 Security Update
The remote Windows host is missing security update 4550965 or cumulative update 4550964. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploit...
How to Disable "Remember my password" Checkbox - Citrix Receiver for Windows
For security reasons, users might want to disable Windows Receiver "Remember my password" checkbox toprevent an automatic logon without credential required...
TrickBot Now Exploits Infected PCs to Launch RDP Brute Force Attacks
A new module for TrickBot banking Trojan has recently been discovered in the wild that lets attackers leverage compromised systems to launch brute-force attacks against selected Windows systems running a Remote Desktop Protocol RDP connection exposed to the Internet. The module, dubbed...
Description of the security update for Office Online Server: March 10, 2020
None None...
Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020
None None...
Internet Bug Bounty: PHP link() silently truncates after a null byte on Windows
The bug submitted at: https://bugs.php.net/bug.php?id=78862 The security advisory at: https://nvd.nist.gov/vuln/detail/CVE-2019-11044 The issue allow remote attackers to read or write arbitrary files via crafted input to an application that calls the vulnerable function. As demonstrated by a...
Multiple Trend Micro products vulnerable to denial-of-service (DoS)
Overview Premium Security 2019 for Windows, Maximum Security 2019 for Windows, Internet Security 2019 for Windows, and Antivirus+ Security 2019 for Windows provided by Trend Micro Incorporated contain a denial-of-service DoS vulnerability CWE-400. BlackWingCat of Pink Flying Whale reported this...
OpenTFTP 1.66 - Local Privilege Escalation Vulnerability
Exploit Title: OpenTFTP 1.66 - Local Privilege Escalation Exploit Author: boku Vendor Homepage: https://sourceforge.net/projects/tftp-server/ Software Link: https://sourceforge.net/projects/tftp-server/files/tftp%20server%20single%20port/OpenTFTPServerSPInstallerV1.66.exe/download Version: 1.66...
February 11, 2020—KB4537821 (Monthly Rollup)
None None...
Security update for git (important)
openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2020:0123-1 Rating: important References: 1082023 1149792 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 Cross-References: CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4535103)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4535103 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...