105 matches found
CVE-2020-1338
Microsoft Word Remote Code Execution (CVE-2020-1338): A vulnerability exists where Word mishandles in-memory objects, enabling an attacker to execute arbitrary code via a specially crafted Word file. Exploitation requires the current user to open the crafted file (e.g., via email or a compromised...
Description of the security update for SharePoint Server 2019: September 8, 2020
None None...
Security Updates for Microsoft Office Web Apps (September 2020)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the...
Security Updates for Microsoft Office Products (September 2020)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
RHEL 7 : firefox (RHSA-2020:1338)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1338 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Amazon Linux AMI : kernel (ALAS-2020-1338)
The version of kernel installed on the remote host is prior to 4.14.165-102.185. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1338 advisory. 2024-05-09: CVE-2019-19965 was added to this advisory. A flaw was found in the Linux kernel. The cryptoreport...
CVE-2019-1338
CVE-2019-1338 describes a Windows NTLM Security Feature Bypass where a MITM attacker can bypass NTLMv2 protection if the client also sends LMv2 responses. The risk is that NTLM authentication could be bypassed under these conditions, enabling unauthorized access or information exposure as describ...
CVE-2019-1338
creationtimestamp| type| source ---|---|--- 2019-10-10 02:26:41+00:00| seen| https://t.me/informationsecuritychannel/31696 2019-10-11 19:54:26+00:00| seen| https://t.me/ExcreamOnSecurity/285 2024-10-10 02:52:34+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/797...
Microsoft Windows Multiple Vulnerabilities (KB4519976)
This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows NTLM CVE-2019-1338 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologies Affecte...
KLA11872 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...
Security Bulletin: Public disclosed vulnerability from Apache Tika
Summary Public disclosed vulnerability from Apache Tika Vulnerability Details CVEID: CVE-2018-1338 Description: Apache Tika is vulnerable to a denial of service, caused by an error in BPGParser. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability ...
Important: Red Hat Security Advisory: Fuse 7.1 security update
An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting (CVE-2017-1338)
Summary Undisclosed security vulnerability in IBM Rational DOORS Next Generation and Rational Requirements Composer may result in Cross-Site Scripting. Vulnerability Details CVEID: CVE-2017-1338 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerabili...
Apache Tika <= 1.17 Multiple Vulnerabilities
Apache Tika is prone to multiple vulnerabilities, including command execution and denial of service DoS. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2018-1338
A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...
CVE-2018-1338
A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...
UBUNTU-CVE-2018-1338
A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...
CVE-2018-1338
CVE-2018-1338 : Apache Tika is vulnerable to a denial of service via a carefully crafted (or fuzzed) file that can trigger an infinite loop in the BPGParser in Tika versions before 1.18. The provided documents confirm the affected component (BPGParser in Apache Tika), the vulnerability type (infi...
