CVE-2018-1007

CVE-2018-1007 refers to an information disclosure in Microsoft Office where memory contents are improperly disclosed when Office renders RTF/OLЕ objects (affecting Office components such as Word/Office). The root cause, per connected advisories, is an error in how memory contents are disclosed, e...

Microsoft Office Compatibility Pack Service Pack 3 Information Disclosure Vulnerability (KB4018354)

This host is missing an important security update according to Microsoft KB4018354 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

End of support for Office 2013

End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...

Microsoft Outlook retrieves remote OLE content without prompting

Overview When a Rich Text RTF email is previewed in Microsoft Outlook, remotely-hosted OLE content is retrieved without requiring any additional user interaction. This can leak private information including the user's password hash, which may be cracked by an attacker. Description Microsoft Outlo...

CVE-2016-0950

Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors...

CVE-2016-0950

Adobe Connect prior to 9.5.2 is vulnerable to user interface spoofing (unspecified vectors). The connected sources confirm this as a vulnerability affecting Adobe Connect’s web interface and point to a security update (APSB16-07) that fixes input validation and content spoofing issues and adds CS...

Oracle: Security Advisory (ELSA-2010-0950)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0950

X-Cart 5.1.6–5.1.10 contains a reflected XSS in admin.php via the substring parameter, allowing remote script injection in the user’s browser. Root cause: improper handling of input leading to script execution. Impact: remote attacker could run arbitrary script in the context of victims’ sessions...

X-Cart contains multiple vulnerabilities

Overview X-Cart versions 5.1.6 through 5.1.10 are vulnerable to cross-site scripting XSS, and versions 5.1.10 and below are vulnerable to authorization bypass. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2015-0950X-Cart versions 5.1...

Apple iTunes 8.1.x - (daap) Buffer Overflow Remote Exploit

No description provided by source. / iTunes-CVE09-s36.c Apple iTunes 8.1.x daap Buffer overflow remote exploit CVE-2009-0950 Coded By : .:: Simo36 ::. Contact : [email protected] [email protected] Home : www.sec-r1z.com Tested on : Win XP SP/SP3 Frensh , Win2k pro SP4 english Thanks To :...

Oracle Linux 5 / 6 : apr-util (ELSA-2010-0950)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0950 advisory. 1.3.9-3.1 - add security fix for CVE-2010-1623 659253 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

APPLE-SA-2013-05-16-1 iTunes 11.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...

APPLE-SA-2013-03-14-2 Safari 6.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-03-14-2 Safari 6.0.3 Safari 6.0.3 is now available and addresses the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.2 Impact: Visiting a maliciously crafted website may lead to an...

Safari < 6.0.3 Multiple Vulnerabilities

Binary data 6712.prm...

Mac OS X : Safari < 6.0.3 Multiple Vulnerabilities

Binary data 800999.prm...

Mac OS X : Apple Safari < 6.0.3 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.3. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

CVE-2013-0950

CVE-2013-0950 affects WebKit as used by Apple iOS before 6.1. A crafted web site could trigger memory corruption in WebKit, allowing remote code execution or causing an application crash (DoS). This is the same vulnerability family noted across Apple advisories in 2013. The initial entry identifi...

CentOS Update for apr-util CESA-2010:0950 centos4 x86_64

Check for the Version of apr-util OpenVAS Vulnerability Test CentOS Update for apr-util CESA-2010:0950 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for apr-util CESA-2010:0950 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0950

The CVE-2012-0950 vulnerability concerns the Apport hook (DistUpgradeApport.py) in Ubuntu Update Manager: when reporting bugs to Launchpad it uploads /var/log/dist-upgrade, potentially exposing repository credentials in a public bug report. This exists because of an incomplete fix for CVE-2012-09...