CVE-2018-0907

CVE-2018-0907 is a security feature bypass in Microsoft Excel/Office products caused by how macro settings are enforced. Affected: Excel 2007 SP3, 2010 SP2, 2013 SP1, 2016, and Office 2016 for Mac, including Office 2016 Click-to-Run. Core issue: bypasses to macro security controls (security featu...

Microsoft Excel 2016 Security Feature Bypass Vulnerability (KB4011727)

This host is missing an important security update according to Microsoft KB4011727 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

KLA11213 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An improper handling of...

Virtuozzo 7 : libblkid / libblkid-devel / libmount / etc (VZLSA-2017-0907)

An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

libblkid, libmount, libuuid, util, uuidd security update

CentOS Errata and Security Advisory CESA-2017:0907 An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Virtuozzo Linux Errata and Security Advisory 2017:0907 Moderate

Upstream security update. Follow RHSA-2017-0907 for details...

Oracle Linux 7 : util-linux (ELSA-2017-0907)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0907 advisory. - Reviewed-by: Joe Jin fix CVE-2017-2616 - Sending SIGKILL to other processes with root privileges via su Tenable has extracted the preceding description block...

CVE-2016-0907

CVE-2016-0907 affects EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3, and 8.0.x before 8.0.0.1, plus IsilonSD Edge OneFS 8.0.x before 8.0.0.1. The issue is that SMB signing is not required within a DCERPC session over ncacn_np, enabling a man-in-the-middle attacker to spoof SMB clients by modify...

Oracle: Security Advisory (ELSA-2014-0907)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0907

Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive...

CVE-2015-0907

CVE-2015-0907 affects Lhaplus, a file compression/decompression tool. The vulnerability is a buffer overflow in Lhaplus before 1.70 that allows remote code execution when processing a specially crafted archive. Affected versions include 1.59 and earlier. The issue is documented across multiple so...

Microsoft HSC URL RemoteCodeExecution (MS04-011) - Ver2 (CVE-2003-0907)

A vulnerability exist in the way Help and Support Center HSC validates URLs with the scheme hcp://. There is a vulnerability in the way the Microsoft Help and Support Center processes URL strings. The vulnerability could be exploited to run malicious JavaScript code in the security context of "My...

Microsoft HSC URL RemoteCodeExecution (MS04-011) - Ver2 (CVE-2003-0907)

A vulnerability exist in the way Help and Support Center HSC validates URLs with the scheme hcp://. There is a vulnerability in the way the Microsoft Help and Support Center processes URL strings. The vulnerability could be exploited to run malicious JavaScript code in the security context of "My...

Two recent IBM DB2 LUW vulnerability to mention the right analysis-vulnerability warning-the black bar safety net

IBM recently released two affected DB2 for linux, unix, windows, three versions of the security vulnerability patches. And this article will explore where these two vulnerabilities, CVE-2 0 1 4-0 9 0 7 and CVE-2 0 1 3-6 7 4 4 some of the technical details to help database administrators assess...

CentOS Update for java CESA-2014:0907 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2014-0907)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0907 advisory. 1:1.6.0.1-6.1.13.4 - moved to icedteaver 1.13.4 - moved to openjdkver b32 and openjdkdate 15jul2014 - added upstreamed patch patch9...

IBM DB2 9.7 < Fix Pack 9a Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 9a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that allows denial of service...

IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...

CVE-2014-0907

CVE-2014-0907 is a local privilege-escalation vulnerability affecting IBM DB2 and IBM Tivoli products shipped with DB2 components. The issue arises from untrusted search paths and Trojan-horse libraries in setuid/setgid contexts, allowing a local user to gain root-equivalent privileges on affecte...

Oracle Linux 5 : pam_krb5 (ELSA-2008-0907)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0907 advisory. 2.2.14-1.el52.1 - add backported fix for ccache permissions bypass when the existingticket option is used CVE-2008-3825, 462112 Tenable has extracted the...