TTCSIRT-288.022620: TT-CSIRT ADVISORY- MICROSOFT INTERNET EXPLORER SCRIPTING ENGINE MEMORY CORRUPTION VULNERABILITY.

  • Home
  • Archive for category "Security Advisories"
TTCSIRT-288.022620: TT-CSIRT ADVISORY- MICROSOFT INTERNET EXPLORER SCRIPTING ENGINE MEMORY CORRUPTION VULNERABILITY.
By

The Microsoft Internet Explorer Scripting Engine contains a memory corruption vulnerability, which can allow a remote, unauthenticated attacker to execute arbitrary code.   Description Microsoft Internet Explorer contains a scripting engine, which handles execution of scripting languages such as VBScript and JScript. The scripting engine JScript component contains an unspecified memory corruption vulnerability. Any application […]

Read More
TTCSIRT-287.022620: TT-CSIRT ADVISORY- MULTIPLE ZYXEL DEVICE VULNERABILITIES.
By

Multiple ZyXEL devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device.   Description CWE-78: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) Multiple ZyXEL devices achieve authentication by using the weblogin.cgi CGI executable. This program fails to […]

Read More
TTCSIRT-286.022620: TT-CSIRT ADVISORY- APACHE TOMCAT VULNERABILITIES
By

There are three vulnerabilities with Apache Tomcat with varying levels of severity. Kindly see below for a summary of each vulnerability: Operating System            : Windows, UNIX variants (UNIX, Linux, OSX) Impact/Access                  : –      Provide Misleading Information –      Remote/Unauthenticated –      Access Confidential Data –      Remote/Unauthenticated –      Unauthorised Access –      Remote/Unauthenticated Resolution: Patch/Upgrade CVE Names:  CVE-2020-1938 CVE-2020-1935 CVE-2019-17569 Original […]

Read More
TTCSIRT-283.022620: TT-CSIRT ADVISORY-CISCO RELEASES SECURITY UPDATES
By

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. TT-CSIRT encourages users and administrators to review the following Cisco advisories and apply the necessary updates: […]

Read More
TTCSIRT-282.022620: TT-CSIRT ADVISORY-ADOBE RELEASES SECURITY UPDATES FOR AFTER EFFECTS AND MEDIA ENCODER
By

Adobe has released security updates to address vulnerabilities in After Effects and Media Encoder. An attacker could exploit these vulnerabilities to take control of an affected system. TT-CSIRT encourages users and administrators to review Adobe Security Bulletins APSB20-09 and APSB20-10 and apply the necessary updates: https://helpx.adobe.com/security/products/after_effects/apsb20-09.html https://helpx.adobe.com/security/products/media-encoder/apsb20-10.html  

Read More
TTCSIRT-281.022620: TT-CSIRT ADVISORY- VMWARE RELEASES SECURITY UPDATES FOR VREALIZE OPERATIONS FOR HORIZON ADAPTER
By

VMware has released security updates to address multiple vulnerabilities in vRealize Operations for Horizon Adapter. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. TT-CSIRT encourages users and administrators to review VMware Security Advisory VMSA-2020-0003 and apply the necessary updates: https://www.vmware.com/security/advisories/VMSA-2020-0003.html  

Read More
TTCSIRT-280.021220: TT-CSIRT ADVISORY- INTEL RELEASES SECURITY UPDATES
By

Intel has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to gain escalation of privileges. TT-CSIRT encourages users and administrators to review the following Intel advisories and apply the necessary updates. RWC3 Advisory – INTEL-SA-00341 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00341.html   MPSS Advisory – INTEL-SA-00340 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00340.html   RWC2 Advisory – INTEL-SA-00339 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00339.html […]

Read More
TTCSIRT-279.021220: TT-CSIRT ADVISORY- MICROSOFT RELEASES FEBRUARY 2020 SECURITY UPDATES
By

Microsoft has released security updates to address multiple vulnerabilities in their software. An attacker could exploit some of these vulnerabilities to take control of an affected system. TT-CSIRT encourages users and administrators to review Microsoft’s February 2020 Security Update Summary and Deployment Information and apply the necessary updates. https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Feb https://support.microsoft.com/en-us/help/20200211/security-update-deployment-information-february-11-2020

Read More

Quick Navigation

Partner Agencies

Subscribe to Stay Updated!

Subscribe

Follow on social media:

Facebook-f X-twitter Linkedin-in Instagram