Lucene search
+L

169 matches found

UbuntuCve
UbuntuCve
added 2016/05/31 12:0 a.m.25 views

CVE-2016-1682

The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy CSP protection mechanism via a ServiceWorker...

6.1CVSS6.9AI score0.0111EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.38 views

Oracle: Security Advisory (ELSA-2013-0982)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.5AI score0.69021EPSS
SaveExploits9References4
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.30 views

Oracle: Security Advisory (ELSA-2015-1682)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9AI score0.084EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.40 views

Oracle: Security Advisory (ELSA-2013-0981)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.5AI score0.69021EPSS
SaveExploits9References4
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.17 views

Oracle: Security Advisory (ELSA-2012-1222)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.7AI score0.12471EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2015/08/28 12:0 a.m.33 views

CentOS Update for thunderbird CESA-2015:1682 centos7

Check the version of thunderbird SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882264";...

10CVSS6.8AI score0.084EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/08/28 12:0 a.m.30 views

CentOS Update for thunderbird CESA-2015:1682 centos6

Check the version of thunderbird SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882260";...

10CVSS6.8AI score0.084EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/08/28 12:0 a.m.25 views

CentOS Update for thunderbird CESA-2015:1682 centos5

Check the version of thunderbird SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882262";...

10CVSS6.8AI score0.084EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/08/26 12:0 a.m.32 views

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2015-1682)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1682 advisory. 38.2.0-4.0.1.el67 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.2.0-4 - Update to 38.2.0 38.1.0-4 ...

10CVSS7.4AI score0.084EPSS
SaveExploits0References6
CVE
CVE
added 2015/05/13 10:0 a.m.95 views

CVE-2015-1682

Microsoft Office Multiple Remote Code Execution Vulnerabilities (CVE-2015-1682) affect Office/SharePoint components across Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, Word/Excel/PowerPoint/SharePoint-related services, etc. Root cause: memory corruption triggered by processing a crafted...

9.3CVSS7.4AI score0.18861EPSS
SaveExploits0References3Affected Software9
Tenable Nessus
Tenable Nessus
added 2015/05/13 12:0 a.m.104 views

MS15-046: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3057181)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint Server, SharePoint Foundation Server, or Microsoft Office Web Apps installed that is affected by multiple remote code execution vulnerabilities due to improper handling of...

9.3CVSS6.7AI score0.18861EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2015/05/13 12:0 a.m.38 views

Microsoft Office Excel Remote Code Execution Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.18861EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2015/05/13 12:0 a.m.25 views

Microsoft Office Web Apps RCE Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

9.3CVSS5AI score0.18861EPSS
SaveExploits0References5
Check Point Advisories
Check Point Advisories
added 2015/05/12 12:0 a.m.21 views

Microsoft Office Memory Corruption (MS15-046: CVE-2015-1682)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

9.3CVSS6.9AI score0.18861EPSS
SaveExploits0
Symantec
Symantec
added 2015/05/12 12:0 a.m.43 views

Microsoft Office CVE-2015-1682 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected...

9.3CVSS0.2AI score0.18861EPSS
SaveExploits0Affected Software16
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.42 views

openSUSE Security Update : xulrunner (openSUSE-SU-2013:1143-1)

Mozilla xulrunner was update to 17.0.7esr bnc825935 Security issues fixed : - MFSA 2013-49/CVE-2013-1682 Miscellaneous memory safety hazards - MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer - MFSA 2013-51/CVE-2013-1687 bmo863933, bmo866823...

10CVSS8.2AI score0.69021EPSS
SaveExploits9References12
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:0 a.m.35 views

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:1175-1)

The icedtea-web Java plugin was updated to 1.11.4 to fix critical security issues : - Security fixes - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder - S7163201, CVE-2012-0547: Simplify toolkit internals references - OpenJDK - S7182135: Impossible to use some editors directly ...

10CVSS8.2AI score0.12471EPSS
SaveExploits2References4
OSV
OSV
added 2014/05/08 2:29 p.m.17 views

CVE-2014-1682

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...

6AI score
SaveExploits0References4
CVE
CVE
added 2014/05/08 2:0 p.m.83 views

CVE-2014-1682

The CVE concerns Zabbix API authentication: versions 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 expose a user impersonation flaw in user.login. An authenticated remote user can spoof arbitrary users by supplying a crafted username, potentially enabling privilege abuse or misrepr...

4CVSS8.6AI score0.01568EPSS
SaveExploits0References4Affected Software2
OpenVAS
OpenVAS
added 2014/05/05 12:0 a.m.24 views

Fedora Update for zabbix FEDORA-2014-5540

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.04111EPSS
SaveExploits5References2
Rows per page
Query Builder