Microsoft Windows COM CVE-2017-0298 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of another user's session. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

Windows 7 and Windows Server 2008 R2 June 2017 Security Updates

The remote Windows host is missing security update 4022722 or cumulative update 4022719. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Hyper-V instruction emulation due to a failure to properly enforce privilege levels. An...

CVE-2016-0298

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-0298

IBM Security Guardium Database Activity Monitor v10 prior to 10.0p100 is affected by CVE-2016-0298, a directory traversal vulnerability allowing an authenticated remote user to read arbitrary files via a crafted URL. Root cause: improper handling of URL paths leading to directory traversal. Impac...

Mageia: Security Advisory (MGASA-2015-0298)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0298

Cross-site scripting XSS vulnerability in the manager web interface in modcluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message...

CVE-2015-0298

Cross-site scripting XSS vulnerability in the manager web interface in modcluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message...

CVE-2015-0298

Summary: CVE-2015-0298 is an XSS vulnerability in the mod_cluster manager web interface, exploitable via a crafted MCMP message. Affected component: mod_cluster (manager web interface) prior to version 1.3.2.Alpha1. Impact: remote attacker can inject arbitrary HTML/script. Root cause: cross-site ...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 security update

An update for Red Hat JBoss Web Server 2.1.0 that fixes two security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 security update

An update for Red Hat JBoss Web Server 2.1.0 that fixes two security issues is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2013-0298

OwnCloud 4.5.x is vulnerable to multiple XSS via (1) an iCalendar file in the calendar app, (2) the dir or (3) file parameters to apps/files_pdfviewer/viewer.php, or (4) the mountpoint parameter to /apps/files_external/addMountPoint.php. Root cause: improper handling of untrusted input in these c...

CVE-2014-0298

The CVE-2014-0298 entry relates to memory corruption in Microsoft Internet Explorer (IE) 9–11 triggered by visiting a crafted website, per the NVD/NVD-derived description. Connected sources corroborate that this is a set of IE memory-corruption vulnerabilities resolved by Microsoft Security Bulle...

Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0298)

BUGTRAQ ID: 66025 CVECAN ID: CVE-2014-0298 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 应用Microsoft Fix...

Microsoft Internet Explorer Memory Corruption (MS14-012; CVE-2014-0298)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Server: Multiple XSS vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.6 and 4.0.11 and all prior versions allow remote attackers to inject arbitrary web script or HTML via the "sitename" and "siteurl" POST parameters to setsites.php in /apps/external/ajax/ CVE-2013-0297 Commits: e0140a stable45,...

Symantec Web Gateway 5.0.28 LFI / Code Execution

Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...

Symantec Web Gateway 5.0.2.8 Multiple Vulnerabilities

Exploit for linux platform in category web applications Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include:...

CVE-2012-0298

CVE-2012-0298 affects Symantec Web Gateway before 5.0.3. The management GUI file-management scripts allow remote attackers to read or delete arbitrary files via directory traversal vectors (noted for the relfile parameter). Affected product/version: Symantec Web Gateway 5.0.x up to 5.0.2.x. Impac...

Ubuntu: Security Advisory (USN-947-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2010 [email protected] http://www.debian.org/security/ Dann Frazier March 10, 2010 http://www.debian.org/security/faq -...