Important Photon OS Security Update - PHSA-2020-0087

Updates of 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0087

Updates of 'go' packages of Photon OS have been released...

CVE-2020-0087

In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0087

CVE-2020-0087 affects Android 10 (framework). The issue is in ActivityManagerService.getProcessPss, enabling a side-channel information disclosure with local access and requiring user interaction to exploit. The vulnerability’s impact is partial information disclosure (high confidentiality impact...

Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (cisco-sa-20200226-nxos-arp)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0087)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the...

Important Photon OS Security Update - PHSA-2018-0087

Updates of 'krb5', 'postgresql' packages of Photon OS have been released...

Cisco Web Security Appliance FTP Authentication Bypass Vulnerability

According to its self-reported version, the remote Cisco Web Security Appliance WSA device is affected by a FTP authentication bypass vulnerability, due to inccorect validation of credentials. A remote attacker could potentially log into the FTP server without a valid password. TRUSTED...

CVE-2014-0087

The checkprivileges method in vmdb/app/controllers/applicationcontroller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine CFME, allows remote authenticated users to bypass authorization and gain privileges by leveraging improper RBAC checking, related to the rbacuseredit action...

CVE-2014-0087

Affected product: ManageIQ / Red Hat CloudForms Management Engine (CFME). Issue: The check_privileges method in vmdb/app/controllers/application_controller.rb allows remote authenticated users to bypass authorization by exploiting improper RBAC checking, specifically related to the rbac_user_edit...

CVE-2017-0087

creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41650 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen|...

Remote code execution

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Window...

CVE-2017-0087

CVE-2017-0087 is a remote code execution vulnerability in Windows Uniscribe (USP10) affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Connected data show exploits targeting USP10!MergeLigRecords, with heap memory corruption in Uniscribe’s font processing triggere...

Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0087)

A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...

MS17-011: Security Update for Microsoft Uniscribe (4013076)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these to execut...

CVE-2016-0087

CVE-2016-0087 is a local elevation-of-privilege vulnerability in Microsoft Windows where an attacker can gain SYSTEM privileges by abusing a flaw in handle validation in memory. Affected products include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The root cause is i...

Microsoft Windows Privilege Elevation Vulnerability (3140410)

This host is missing an important security update according to Microsoft Bulletin MS16-031 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Elevation of Privilege (MS16-031: CVE-2016-0087)

An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to type confusion. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted file...

Oracle: Security Advisory (ELSA-2015-0087)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Adobe Font Driver CVE-2015-0087 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 5.0.1...