VMware Horizon View Client 4.x < 4.8.1 Information Disclosure Vulnerability (VMSA-2018-0019)

The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.8.1. It is, therefore, affected by an unspecified information disclosure vulnerability related to the Message Framework library. Note that Nessus has not tested for these issues but has instead relied only on...

CVE-2018-0019

A vulnerability in Junos OS SNMP MIB-II subagent daemon mib2d may allow a remote network based attacker to cause the mib2d process to crash resulting in a denial of service condition DoS for the SNMP subsystem. While a mib2d process crash can disrupt the network monitoring via SNMP, it does not...

Virtuozzo 7 : gstreamer-plugins-good / etc (VZLSA-2017-0019)

An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Memory corruption

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is differen...

CVE-2017-0019

CVE-2017-0019 affects Microsoft Word 2016, enabling remote code execution or memory corruption via a crafted document. The CVSSv3 base score is 7.8 (HIGH) with LOCAL attack vector and user interaction required; impact includes high confidentiality, integrity, and availability. The vulnerability i...

Microsoft Office CVE-2017-0019 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

WordPress Magic Fields 1 1.7.1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Scripting in Magic Fields 1 WordPress Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016...

Virtuozzo Linux Errata and Security Advisory 2017:0019 Moderate

Upstream security update. Follow RHSA-2017-0019 for details...

RedHat Update for gstreamer-plugins-good RHSA-2017:0019-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : gstreamer-plugins-good (ELSA-2017-0019)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0019 advisory. 0.10.31-12 - Disable insecure FLX plugin Resolves: rhbz1400842 Tenable has extracted the preceding description block directly from the Oracle Linux...

KLA10934 Arbitrary code execution and denial of service vulnerability in VMware products

An unspecified vulnerability was found in VMware Workstation Pro 12.x before 12.5.2, VMware Workstation Player 12.x before 12.5.2 and VMware Fusion, Fusion Pro 8.x before 8.5.2. By exploiting this vulnerability malicious users can execute arbitrary code on the host OS or cause a denial of service...

CVE-2013-0019

creationtimestamp| type| source ---|---|--- 2016-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40879...

Microsoft Internet Explorer 9 CDoc::ExecuteScriptUri Use-After-Free

Since November I have been releasing details on all vulnerabilities I found in web-browsers that I had not released before. I will try to continue to publish all my old vulnerabilities, including those not in web-browser, as long as I can find some time to do so. If you find this information...

VMware Workstation 12.x < 12.5.2 Drag-and-Drop Feature Arbitrary Code Execution (VMSA-2016-0019)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.2. It is, therefore, affected by an arbitrary code execution vulnerability in the drag-and-drop feature due to an out-of-bounds memory access error. An attacker within the guest can exploit this to execut...

VMware Workstation 12.x < 12.5.2 Drag-and-Drop Feature Arbitrary Code Execution (VMSA-2016-0019) (Linux)

The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.2. It is, therefore, affected by an arbitrary code execution vulnerability in the drag-and-drop feature due to an out-of-bounds memory access error. An attacker within the guest can exploit this to execute...

FreeBSD : moodle -- multiple vulnerabilities (3ddcb42b-5b78-11e6-b334-002590263bf5)

Marina Glancy reports : - MSA-16-0019: Glossary search displays entries without checking user permissions to view them - MSA-16-0020: Text injection in email headers - MSA-16-0021: Unenrolled user still receives event monitor notifications even though they can no longer access course %NASLMINLEVE...

CVE-2016-0019

CVE-2016-0019 is a Windows RDP security bypass affecting the RDP service implementation in Windows 10 (Gold and 1511). A remote attacker can bypass login restrictions and establish sessions for blank-password accounts by connecting with a modified RDP client. This is labeled as a security bypass ...

CVE-1999-0019

Delete or create a file via rpc.statd, due to invalid information...

Oracle: Security Advisory (ELSA-2010-0019)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...