Microsoft Office Excel Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Suite Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-022: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3038999)

The remote Windows host has a version of Microsoft Office, Office Compatibility Pack, Microsoft Word Viewer, Microsoft Excel Viewer, SharePoint Server, or Microsoft Office Web Apps that is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to...

Microsoft Office Memory Corruption (MS15-022; CVE-2015-0086)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is caused when Microsoft Office does not properly handle rich text format files in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted file with an affected...

CVE-2014-0086

CVE-2014-0086 affects JBoss RichFaces: doFilter in webapp/PushHandlerFilter.java on RichFaces 4.3.4, 4.3.5 and 5.x is vulnerable to remote DoS via a flood of malformed Atmosphere push requests. Root cause: inadequate input filtering in PushHandlerFilter.java leads to memory consumption and out-of...

JBoss RichFaces 'PushHandlerFilter.java'远程拒绝服务漏洞

CVECAN ID: CVE-2014-0086 JBoss RichFaces是一个具有Ajax和JSF特性的Web框架。 RichFaces没有正确过滤某些请求，未经身份验证的远程攻击者通过发送大量的畸形请求到使用Atmosphere框架的RichFaces应用，利用此漏洞导致应用服务器拒绝服务（大量的内存消耗）。 0 JBoss Group RichFaces 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.jboss.org/...

CVE-2013-0086

Microsoft OneNote 2010 SP1 is affected by CVE-2013-0086 due to a buffer size validation flaw during memory allocation while parsing OneNote files. The root cause is improper buffer size handling, which can lead to information disclosure when a crafted OneNote file is opened. Affected product: One...

Microsoft OneNote Information Disclosure Vulnerability (2816264)

This host is missing an important security update according to Microsoft Bulletin MS13-025. OpenVAS Vulnerability Test $Id: secpodms13-025.nasl 6074 2017-05-05 09:03:14Z teissa $ Microsoft OneNote Information Disclosure Vulnerability 2816264 Authors: Thanga Prakash S Copyright: Copyright c 2013...

CVE-2012-0086

Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0095 and CVE-2012-0108...

CVE-2012-0086

Technical details for CVE-2012-0086 are not publicly available in the provided connected documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates.

CentOS Update for openssl CESA-2012:0086 centos4

Check for the Version of openssl OpenVAS Vulnerability Test CentOS Update for openssl CESA-2012:0086 centos4 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Microsoft Windows HTTP Services Chunked Encoding Integer Overflow (MS09-013; CVE-2009-0086)

A remote code execution vulnerability has been reported in Microsoft Windows HTTP services...

Code injection

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service memory and CPU consumption via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different...

CVE-2011-0086

CVE-2011-0086 pertains to win32k.sys in affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, Windows 7) where user-mode input is not properly validated by kernel-mode drivers. This enables local privilege escalation via a crafted application. Acknowledge...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2479628)

This host is missing a critical security update according to Microsoft Bulletin MS11-012. OpenVAS Vulnerability Test $Id: secpodms11-012.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2479628 Authors: Sooraj KS Copyright: Copyright c 2011...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0086) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

CVE-2010-0086

Technical details about CVE-2010-0086 are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates from official sources.

Microsoft SQL Server CONVERT Function Buffer Overflow (MS08-040; CVE-2008-0086)

Microsoft SQL Server is a relational database management system RDBMS. Microsoft SQL Server uses Transact-SQL T-SQL, a proprietor extension to Structured Query Language SQL, for querying and modifying data and managing databases. SQL Server can be remotely accessed via the Tabular Data Stream TDS...

Microsoft Windows WinHTTP服务整数下溢漏洞（MS09-013）

BUGTRAQ ID: 34435 CVECAN ID: CVE-2009-0086 Microsoft Windows是微软发布的非常流行的操作系统。 Windows HTTP服务处理远程Web服务器所返回的特定值的方式存在整数下溢漏洞。如果用户受骗访问了恶意服务器的话，就可以触发这个溢出，导致在用户机器上执行任意代码。 Microsoft Windows XP x64 SP2 Microsoft Windows XP x64 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1...

CVE-2009-0086

CVE-2009-0086 describes an integer underflow in Windows HTTP Services (WinHTTP) that allows remote code execution when a remote server sends crafted values in a response. The vulnerability affects multiple Windows versions, including Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista (Gold/...