Microsoft Office Online CVE-2019-1445 Spoofing Vulnerability

Description Microsoft Office Online is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Office...

KLA11604 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure...

Security Updates for Microsoft Office Online Server (November 2019)

The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly. An attacker cou...

CVE-2018-1445

IBM WebSphere Portal (versions 8.0.0–8.0.0.1, 8.5, 9.0) is affected by CVE-2018-1445 for a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. An unauthenticated, remote attacker can lure a user to a specially crafted URL to execute arbitrary script in t...

CVE-2015-1445

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30...

CVE-2015-1445

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30...

CVE-2015-1445

CVE-2015-1445 affects the fli4l httpd component. The connected documents confirm an HTTP header injection vulnerability in the httpd package for fli4l before 3.10.1 and in version 4.0 before 2015-01-30. The CVSS metrics indicate a NETWORK-exposed issue with HIGH severity (CVSS v3.0: AV:N/AC:L/PR:...

CVE-2016-1445

Cisco ASA Software 8.2–9.4.3.3 is affected by an ACL bypass vulnerability in the ICMP Echo Reply handling, allowing unauthenticated remote attackers to bypass ACLs and permit ICMP traffic that should be denied. The issue stems from how ACL filters for ICMP echo requests/replies are implemented, e...

Oracle: Security Advisory (ELSA-2012-1445)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-1445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream in an RTMP session...

CVE-2010-1445

Heap-based buffer overflow in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted byte stream in an RTMP session...

CVE-2010-1445

VLC Media Player before 1.0.6 is affected by CVE-2010-1445, a heap-based buffer overflow in the RTMP handling that can be exploited by a crafted byte stream to cause a denial of service or potentially execute arbitrary code. The vulnerability is remote and unauthenticated (network attack vector) ...

openSUSE: Security Advisory for kernel (openSUSE-SU-2014:0677-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-ec2 USN-2129-1

Check for the Version of linux-ec2 OpenVAS Vulnerability Test $Id: gbubuntuUSN21291.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux-ec2 USN-2129-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu Update for linux USN-2128-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN21281.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2128-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

USN-2129-1: Linux kernel (EC2) vulnerabilities

An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local user could exploit this flaw to discover keystroke timing and potentially discover sensitive information like password length. CVE-2013-0160 Vasily Kulikov reported a flaw in the...

CVE-2014-1445

The wanxlioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call...

CVE-2014-1445

Technical details for CVE-2014-1445 are not publicly provided in the supplied documents. The initial description contains core details, but no additional technical specifics are found in connected documents. Monitor for updates.

Linux Kernel 'wanxl.c'本地信息泄露漏洞

BUGTRAQ ID: 64953 CVECAN ID: CVE-2014-1445 Linux Kernel是Linux操作系统的内核。 Linux kernel在实现上存在本地信息泄露漏洞，本地攻击者可利用此漏洞造成内存泄露敏感信息。 0 Linux kernel 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...