125 matches found
Memory corruption
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
Memory corruption
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is differen...
CVE-2017-0019
CVE-2017-0019 affects Microsoft Word 2016, enabling remote code execution or memory corruption via a crafted document. The CVSSv3 base score is 7.8 (HIGH) with LOCAL attack vector and user interaction required; impact includes high confidentiality, integrity, and availability. The vulnerability i...
Microsoft Office CVE-2017-0019 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
WordPress Magic Fields 1 1.7.1 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Scripting in Magic Fields 1 WordPress Plugin ------------------------------------------------------------------------ Burak Kelebek, July 2016...
Virtuozzo Linux Errata and Security Advisory 2017:0019 Moderate
Upstream security update. Follow RHSA-2017-0019 for details...
RedHat Update for gstreamer-plugins-good RHSA-2017:0019-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : gstreamer-plugins-good (ELSA-2017-0019)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0019 advisory. 0.10.31-12 - Disable insecure FLX plugin Resolves: rhbz1400842 Tenable has extracted the preceding description block directly from the Oracle Linux...
KLA10934 Arbitrary code execution and denial of service vulnerability in VMware products
An unspecified vulnerability was found in VMware Workstation Pro 12.x before 12.5.2, VMware Workstation Player 12.x before 12.5.2 and VMware Fusion, Fusion Pro 8.x before 8.5.2. By exploiting this vulnerability malicious users can execute arbitrary code on the host OS or cause a denial of service...
CVE-2013-0019
creationtimestamp| type| source ---|---|--- 2016-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40879...
Microsoft Internet Explorer 9 CDoc::ExecuteScriptUri Use-After-Free
Since November I have been releasing details on all vulnerabilities I found in web-browsers that I had not released before. I will try to continue to publish all my old vulnerabilities, including those not in web-browser, as long as I can find some time to do so. If you find this information...
VMware Workstation 12.x < 12.5.2 Drag-and-Drop Feature Arbitrary Code Execution (VMSA-2016-0019)
The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.2. It is, therefore, affected by an arbitrary code execution vulnerability in the drag-and-drop feature due to an out-of-bounds memory access error. An attacker within the guest can exploit this to execut...
VMware Workstation 12.x < 12.5.2 Drag-and-Drop Feature Arbitrary Code Execution (VMSA-2016-0019) (Linux)
The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.2. It is, therefore, affected by an arbitrary code execution vulnerability in the drag-and-drop feature due to an out-of-bounds memory access error. An attacker within the guest can exploit this to execute...
FreeBSD : moodle -- multiple vulnerabilities (3ddcb42b-5b78-11e6-b334-002590263bf5)
Marina Glancy reports : - MSA-16-0019: Glossary search displays entries without checking user permissions to view them - MSA-16-0020: Text injection in email headers - MSA-16-0021: Unenrolled user still receives event monitor notifications even though they can no longer access course %NASLMINLEVE...
CVE-2016-0019
CVE-2016-0019 is a Windows RDP security bypass affecting the RDP service implementation in Windows 10 (Gold and 1511). A remote attacker can bypass login restrictions and establish sessions for blank-password accounts by connecting with a modified RDP client. This is labeled as a security bypass ...
CVE-1999-0019
Delete or create a file via rpc.statd, due to invalid information...
Oracle: Security Advisory (ELSA-2010-0019)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-0019)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : socat (openSUSE-2015-324)
socat was updated 1.7.2.4 to fix one security issue and bugs. The following vulnerabilities were fixed : - socats PROXY-CONNECT address was vulnerable to a buffer overflow with data from command line CVE-2014-0019, boo860991 The following bugs were fixed : - socat would frequently crash on ppc an...
CVE-2015-0019
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...