77 matches found
CVE-2018-0944
Technical details for CVE-2018-0944 are not publicly available in the provided connected documents. Monitor for updates; based on current inputs, no concrete affected products, versions, exploit info, or remediation are disclosed here.
Microsoft SharePoint Server CVE-2018-0944 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Security Updates for Microsoft SharePoint Server and Microsoft Project Server (March 2018)
The Microsoft SharePoint Server or Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an...
Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X
Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...
CVE-2016-0944
Technical details for CVE-2016-0944 are not provided in the connected documents. The initial entry mentions affected Adobe products and memory corruption/remote code risk but lacks root cause, affected versions, or available fixes. Monitor for updates.
SUSE: Security Advisory for Xen (SUSE-SU-2015:0944-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-0944
IBM ODM is vulnerable to CSRF in the RES Console of Rule Execution Server. Affected: IBM WebSphere Operational Decision Manager v7.5 (before FP3 IF37), v8.0 (before MP1 FP2), and v8.5 (before MP1 IF26). Root cause described as improper validation of user-supplied input in the RES Console, enablin...
Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3354; CVE-2016-0944)
A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
CVE-2013-0944
CVE-2013-0944 affects EMC Avamar Server prior to 6.1.0. The issue resides in the web-based file-restore interface, allowing remote authenticated users to read arbitrary files via a crafted URL. Red Hat and EMC advisories corroborate the vulnerability and provide a remediation path: upgrade to EMC...
CVE-2012-0944
Apt daemon (Aptdaemon) versions 0.43 and earlier on Ubuntu 11.04, 11.10, and 12.04 LTS do not authenticate packages when a transaction is not simulated, enabling a remote attacker to install arbitrary packages via a man-in-the-middle attack. The vulnerability is caused by insufficient authenticat...
CVE-2011-0944
CVE-2011-0944 affects Cisco IOS Software (12.4, 15.0, 15.1) where processing malformed IPv6 packets can cause an unauthenticated, remote attacker to reload an affected device, per Cisco’s IPv6 Denial of Service advisory. Root cause: IPv6 packet handling vulnerability in IOS IPv6 stack that trigge...
CVE-2010-0944
Joomla! component com_jcollection contains a directory traversal vulnerability (CVE-2010-0944) in the JCollection controller parameter passed to index.php, enabling remote attackers to read arbitrary server files by manipulating .. in the request. The connected template details confirm affected s...
CVE-2010-0944
creationtimestamp| type| source ---|---|--- 2010-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11088...
Microsoft Jet DB Engine Buffer Overflow (CVE-2005-0944)
Microsoft Jet is a database engine developed by Microsoft Corporation for use within their products and third-party products. Some products that use Microsoft Jet are Microsoft Access, Microsoft Visual Basic, Microsoft C++ and Microsoft Excel. Microsoft Jet is designed for desktop application dat...
CVE-2009-0944
The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a file that triggers memory corruptio...
CVE-2009-0944
CVE-2009-0944 affects Mac OS X: The Spotlight Importer for Microsoft Office in Spotlight on Mac OS X 10.4.11 and 10.5 up to 10.5.6/10.5.x before 10.5.7 allows memory corruption via crafted Office files, leading to possible arbitrary code execution or a crash. Affected component: Spotlight’s Micro...
CVE-2008-0944
Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier is vulnerable to a remote denial of service (NULL dereference and application crash) caused by a version field containing zero. No remediation or exploit details are provided in the documents. If exploitable vectors or fixes exist, they are not ...
Stack overflow
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 aka Microsoft Jet Engine, as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count...
Internet Explorer Multiple COM Objects Memory Corruption (MS07-027; CVE-2007-0942; CVE-2007-0944; CVE-2007-0945; CVE-2007-2221)
Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...
CVE-2007-0944
CVE-2007-0944 is an Uninitialized Memory Corruption Vulnerability in Internet Explorer (CTableCol::OnPropertyChange) where an attacker can trigger arbitrary code execution by calling deleteCell on a named row/column, then accessing the column. Affected do include IE 5.01 SP4 on Windows 2000 SP4; ...