125 matches found
CVE-2021-1263
CVE-2021-1263 relates to multiple command‑injection vulnerabilities in Cisco SD‑WAN products. The connected sources confirm that an authenticated attacker could exploit the CLI to execute commands with root privileges on the device, compromising confidentiality, integrity, and potentially availab...
Microsoft Windows Multiple Vulnerabilities (KB4561612)
This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1263
An information disclosure vulnerability exists in the way Windows Error Reporting WER handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1261...
CVE-2020-1263
An information disclosure vulnerability exists in the way Windows Error Reporting WER handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1261...
CVE-2020-1263
CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...
KB4561602: Windows 10 Version 1709 June 2020 Security Update
The remote Windows host is missing security update 4561602. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...
KB4561621: Windows 10 Version 1803 June 2020 Security Update
The remote Windows host is missing security update 4561621. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute...
CVE-2019-1263
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'...
CVE-2019-1263
CVE-2019-1263 — Microsoft Excel Information Disclosure . The connected Nessus/Office update docs confirm an information disclosure in Excel where memory contents may be exposed. The vulnerability is tied to Excel's handling of in-memory objects, enabling potential leakage of sensitive data. The O...
Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB4475574)
This host is missing an important security update according to Microsoft KB4475574 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office Multiple Vulnerabilities (Sep 2019) - Mac OS X
This host is missing a critical security update for Microsoft Office 2019 on Mac OS X according to Microsoft security update September 2019 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2019)
This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Security Updates for Microsoft Office Products (September 2019)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability...
CVE-2018-1263
Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal...
CVE-2018-1263
Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal...
CVE-2018-1263
Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal...
CVE-2018-1263
CVE-2018-1263 affects spring-integration-zip (prior to 1.0.2 per initial, with later references noting fixes up to 1.0.4). The flaw is a path-traversal during archive extraction, where filenames are concatenated to the target directory, allowing an arbitrary file write outside the intended folder...
Debian: Security Advisory (DLA-1263-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1263-1 : curl security update
Craig de Stigter discovered that authentication data might be leaked to third parties when following HTTP redirects. For Debian 7 'Wheezy', these problems have been fixed in version 7.26.0-1+wheezy24. We recommend that you upgrade your curl packages. NOTE: Tenable Network Security has extracted t...
