public disclosure

  1. TA14-098A: OpenSSL 'Heartbleed' vulnerability (CVE-2014-0160)

    Original release date: April 08, 2014 Systems Affected OpenSSL 1.0.1 through 1.0.1f OpenSSL 1.0.2-beta Overview A vulnerability in OpenSSL could allow a remote attacker to expose sensitive data, possibly including user authentication credentials and secret keys, through incorrect memory...
    • News
    • Thread
    • credentials cve-2014-0160 data exposure exploit heartbleed impact key material memory mitigation openssl patch perfect forward secrecy public access public disclosure revision history security security flaw system administrators tls vulnerability
    • Replies: 0
    • Forum: Security Alerts

  2. MS11-025 - Important : Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote

    Severity Rating: Important Revision Note: V4.3 (March 13, 2012): Added an entry to the update FAQ to announce a detection change for KB2565063 and KB2565057 to correct an installation issue. This is a detection change only. There were no changes to the security update files...
    • News
    • Thread
    • applications detection faq installation library march 2012 mfc microsoft network folder patch public disclosure remote code execution risk management security software update technical bulletin update vulnerability webdav
    • Replies: 0
    • Forum: Security Alerts

  3. MS12-006 - Important : Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584) - Versi

    Severity Rating: Important Revision Note: V1.1 (January 18, 2012): Added MS10-085 as a bulletin replaced by the KB2585542 update for Windows 7 for 32-bit Systems, Windows 7 for x64-based Systems, Windows Server 2008 R2 for x64-based Systems, and Windows Server 2008 R2 for...
    • News
    • Thread
    • affected systems bulletin cipher suites encryption information disclosure kb2585542 microsoft ms12-006 patch public disclosure revision security severity rating ssl status tls update vulnerability web traffic windows 7
    • Replies: 0
    • Forum: Security Alerts

  4. MS11-100 - Critical : Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

    Severity Rating: Critical Revision Note: V1.3 (February 1, 2012): Corrected registry keys and installation switches in the deployment tables for Windows Server 2003 and Windows Server 2008, and installation switches in the deployment table for Windows Vista. This is an informational...
    • News
    • Thread
    • asp.net attack command execution critical deployment elevation of privilege exploitation informational change microsoft net framework private reports public disclosure registry keys security update server 2003 server 2008 unauthorized access vulnerabilities windows vista
    • Replies: 0
    • Forum: Security Alerts

  5. MS10-07B - Important : Vulnerability in ASP.NET Could Allow Information Disclosure (2418042) - Versi

    Severity Rating: Important Revision Note: V4.1 (April 20, 2011): Corrected registry key verification for Microsoft .NET Framework 3.5 Service Pack 1 when installed on Windows XP and Windows Server 2003. Summary: This security update resolves a publicly disclosed...
    • News
    • Thread
    • asp.net data tampering encryption exploitation framework information disclosure microsoft patch public disclosure registry key security service pack update vulnerability windows server windows xp
    • Replies: 0
    • Forum: Security Alerts

  6. MS11-068 - Moderate: Vulnerability in Windows Kernel Could Allow Denial of Service (2556532) - Versi

    Severity Rating: Moderate - Revision Note: V1.0 (August 9, 2011): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow denial of service if a user visits a network share (or visits a Web site that points...
    • News
    • Thread
    • denial of service microsoft moderate rating network share public disclosure revision note security update user awareness vulnerability windows kernel
    • Replies: 0
    • Forum: Security Alerts

  7. MS11-025 - Important: Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote C

    Bulletin Severity Rating:Important - This security update resolves a publicly disclosed vulnerability in certain applications built using the Microsoft Foundation Class (MFC) Library. The vulnerability could allow remote code execution if a user opens a legitimate file associated with such an...
    • News
    • Thread
    • code execution foundation class mfc library microsoft network security public disclosure remote access security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  8. MS10-074 - Moderate: Vulnerability in Microsoft Foundation Classes Could Allow Remote Code Execution

    Bulletin Severity Rating:Moderate - This security update resolves a publicly disclosed vulnerability in the Microsoft Foundation Class (MFC) Library. The vulnerability could allow remote code execution if a user is logged on with administrative user rights and opens an application built with the...
    • News
    • Thread
    • access control administrative rights attacker code execution exploit foundation mfc library microsoft moderate severity permissions public disclosure remote code execution security risk security update software security system control update user accounts user rights vulnerability
    • Replies: 0
    • Forum: Security Alerts

  9. MS10-061 - Critical: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (23472

    Bulletin Severity Rating:Critical - This security update resolves a publicly disclosed vulnerability in the Print Spooler service. The vulnerability could allow remote code execution if an attacker sends a specially crafted print request to a vulnerable system that has a print spooler interface...
    • News
    • Thread
    • attack vector bulletin critical patch print spooler public disclosure remote code execution rpc security system security vulnerability windows update
    • Replies: 0
    • Forum: Security Alerts