SUSE: Security Advisory (SUSE-SU-2022:1448-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1448

Cisco Firepower Threat Defense Software is affected by a command-injection vulnerability in the CLI that, in multi-instance mode, could allow an authenticated local attacker to run arbitrary commands with root privileges due to insufficient validation of user-supplied command arguments. The issue...

CVE-2021-1448 Cisco Firepower Threat Defense Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is running in multi-instance mode. This vulnerability is due to...

Amazon Linux AMI : mod24_auth_openidc (ALAS-2020-1448)

The version of mod24authopenidc installed on the remote host is prior to 1.8.8-7.6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1448 advisory. An open redirect flaw was discovered in modauthopenidc, where it handles logout redirection. The module does not...

CVE-2020-1448

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447...

Remote code execution

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448...

CVE-2020-1448

CVE-2020-1448 corresponds to a Remote Code Execution vulnerability in Microsoft Word. The issue arises when Word fails to properly handle objects in memory, enabling an attacker to run code in the context of the current user. The connected Nessus entries corroborate that CVE-2020-1448 is grouped ...

Description of the security update for Word 2013: July 14, 2020

Description of the security update for Word 2013: July 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following Microsoft...

Microsoft Excel Remote Code Execution (CVE-2019-1448)

A remote code execution vulnerability exists in Microsoft Excel. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2019-1448)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office Multiple Vulnerabilities (Nov 2019) - Mac OS X

This host is missing a critical security update for Microsoft Office 2016 and Office 2019 on Mac OS X according to Microsoft security update November 2019 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2019-1448

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'...

CVE-2019-1448

CVE-2019-1448 is a Microsoft Excel remote code execution vulnerability. The connected documents describe that Excel fails to properly handle objects in memory, leading to the execution of arbitrary code when a user opens a specially crafted file (as seen in Office/Excel advisories and Nessus entr...

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Excel

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a remote code execution vulnerability in Microsoft Excel. Microsoft disclosed this bug as part of their monthly security update Tuesday. This vulnerability exists in the...

KLA11604 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure...

Security Updates for Microsoft Excel Products (November 2019)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Security Bulletin: Db2 vulnerability affects the IBM Spectrum Protect Server (CVE-2018-1448)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server is affected by an IBM Db2 vulnerability that could allow a local user to overwrite arbitrary files owned by the Db2 instance owner. UPDATED 1/16/2019: Changed "First Fixing VRM Level" in Remediation/Fixes table for 8.1 from...

SUSE SLED12 Security Update : LibreOffice (SUSE-SU-2019:1448-1)

This update for libreoffice and libraries fixes the following issues : LibreOffice was updated to 6.2.3.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes : If there is no firebird engine we still need java to run hsqldb bsc1135189 PPTX: Rectangle...

Debian: Security Advisory (DLA-1448-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM® Db2® vulnerability allows local user to overwrite Db2 files (CVE-2018-1448)

Summary A vulnerability in IBM Db2 could allow a local user to obtain elevated privilege and overwrite Db2 files. Vulnerability Details CVEID: CVE-2018-1448 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server contains a vulnerability that could allow a local user to...