CVE-2017-0915

Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...

CVE-2017-0915

Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...

[SECURITY] [DSA 4145-1] gitlab security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2018 https://www.debian.org/security/faq -...

Privilege escalation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0915

Technical details are not publicly available in the provided documents for CVE-2018-0915; no product/version specifics or remediation are disclosed here. Monitor for updates from official sources.

Microsoft SharePoint Server CVE-2018-0915 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Security Updates for Microsoft SharePoint Server and Microsoft Project Server (March 2018)

The Microsoft SharePoint Server or Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an...

KLA11213 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An improper handling of...

FreeBSD : gitlab -- Remote code execution on project import (65fab89f-2231-46db-8541-978f4e87f32a)

GitLab developers report : Today we are releasing versions 10.3.4, 10.2.6, and 10.1.6 for GitLab Community Edition CE and Enterprise Edition EE. These versions contain a number of important security fixes, including two that prevent remote code execution, and we strongly recommend that all GitLab...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0915

Upstream security update. Follow RHBA-2017-0915 for details...

CVE-2016-0915

CVE-2016-0915 affects the Self-Service Portal in EMC RSA Authentication Manager Prime Self-Service 3.0 and 3.1 (before 3.1 1915.42871). The vulnerability is a direct object reference flaw that allows remote authenticated users to cause a denial of service by altering a token serial number within ...

CVE-2015-0915

RAKUS MailDealer (MailDealer 11.2.1 and earlier) is affected by a cross-site scripting (CWE-79) vulnerability due to a flaw in processing attachment filenames. This allows remote attackers to cause arbitrary script execution in a user’s browser when a crafted attachment filename is viewed. The co...

CVE-2015-0915

Cross-site scripting XSS vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename...

IBM Maximo: Cross-site Scripting Vulnerability Addressed in Asset and Service Management (CVE-2014-0914 and -0915)

Two classes of persistent XSS issues we reported in IBM Maximo a month or two back are now fixed: http://www.pentestpartners.com/blog/further-ibm-maximo-asset-management-vulnerabilities-reported/ Individual bulletins linked from the above, but tl;dr is I would suggest patching, as this could...

CVE-2014-0915

CVE-2014-0915 affects IBM Maximo and related products (Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government/Nuclear Power/Transportation/Life Sciences/Oil & Gas/Utilities, Tivoli IT, Tivoli Service Request Manager, Maximo Service Desk, CMDB, SmartCloud Control Desk) ...

CVE-2013-0915

The CVE-2013-0915 entry affects Google Chrome OS: GPUs may overflow in the GPU process, before version 25.0.1364.173, allowing denial of service and possibly other impact. The related Chrome OS Stable Channel update (25.0.1364.173) fixes the overflow in the GPU process; release notes credit this ...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 25.0.1364.173 Platform version: 3428.210.0 for all Chrome OS devices. This build contains a number of bug fixes and security improvements. Machines will be receiving updates over the next several days. Release highlights: Updated Flash to 11.6.602.180, which...

CVE-2012-0915

Summary: CVE-2012-0915 concerns RenRen Talk 2.9, where an integer signedness error in skin-file handling enables a remote attacker to trigger a heap-based buffer overflow via a crafted BMP image. The fault is in how dimensions of a skin file are processed, leading to arbitrary code execution as d...

IBM Lotus Domino Multiple Remote Buffer Overflow Vulnerabilities

IBM Lotus Domino Server is prone to remote buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DSquare Exploit Pack: D2SEC_LOTUSCAL2

Name| d2seclotuscal2 ---|--- CVE| CVE-2011-0915 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino iCalendar Meeting Request Stack Overflow Vulnerability Notes|...