CVE-2019-1008

creationtimestamp| type| source ---|---|--- 2019-05-16 19:50:55+00:00| seen| https://t.me/cvemitreorg/21...

CVE-2019-1008

A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'...

CVE-2019-1008

CVE-2019-1008 corresponds to a security feature bypass in Microsoft Dynamics 365 (on-premises). Multiple sources confirm an unauthenticated remote attacker could bypass security controls to perform restricted operations. Affected are Dynamics On-Premises installations with versions cited in Nessu...

Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 (on-premises) version 8.2: May 14, 2019

Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 on-premises version 8.2: May 14, 2019 INTRODUCTION Microsoft Dynamics 365 online and on-premises Update 2.6 is now available. This article describes the hotfixes and updates that are include...

Microsoft Dynamics On-Premise CVE-2019-1008 Security Bypass Vulnerability

Description Microsoft Dynamics is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Dynamics 365 on-premises 8.2 Microsoft Dynamics 365 on-premises 9 Microsoft...

Amazon Linux AMI : patch (ALAS-2018-1008)

Malicious patch files cause ed to execute arbitrary commands GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file...

CVE-2018-1008

CVE-2018-1008 describes a local elevation-of-privilege vulnerability in Windows Adobe Type Manager Font Driver (ATMFD.dll). The flaw stems from improper handling of objects in memory, enabling an attacker to execute arbitrary code with kernel or SYSTEM privileges on vulnerable Windows editions (W...

Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018

Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018 Summary A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affect...

Microsoft Windows OpenType Fonts CVE-2018-1008 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code within the context of the affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versio...

KB4093122: Windows Server 2012 April 2018 Security Update

The remote Windows host is missing security update 4093122 or cumulative update 4093123. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in...

Security Updates for Windows Server 2008 (April 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully...

Adobe Reader Multiple Vulnerabilities (Mar 2016) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2016-1008

Summary (CVE-2016-1008) : Adobe Reader and Acrobat on Windows/macOS were affected by an untrusted search path vulnerability that could allow local privilege elevation via a Trojan horse DLL in an unspecified directory. This CVE is part of APSB16-09 and ties to vulnerable versions: Acrobat/Reader ...

March 2016 Adobe Acrobat, Reader, Digital Editions Patches

Adobe today released security updates for its PDF editing and viewing products, Acrobat and Reader, and its ereader for books called Adobe Digital Editions. And while the customary Flash update is missing from today’s monthly rollout, Adobe said a new version of the software will be available “in...

KLA10767 Multiple vulnerabilities in Adobe Acrobat & Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple memory corruption vulnerabilities can be exploited to cause...

Oracle: Security Advisory (ELSA-2014-1008)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1008

SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed input...

CVE-2015-1008

CVE-2015-1008 is an SQL injection vulnerability in Emerson AMS Device Manager (before v13) that allows privileged escalation for authenticated users via malformed input. Exploitation is not remote and requires user interaction, per ICS‑CERT guidance. Remediation includes upgrading to v13 or apply...

CentOS Update for libsmbclient CESA-2014:1008 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : samba (ELSA-2014-1008)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1008 advisory. - resolves: 1126013 - CVE-2014-3560: remote code execution in nmbd. Tenable has extracted the preceding description block directly from the Oracle Linux securit...