Description of the security update for Excel Viewer 2007: December 11, 2018

Description of the security update for Excel Viewer 2007: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Description of the security update for PowerPoint Viewer 2007: December 11, 2018

Description of the security update for PowerPoint Viewer 2007: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...

2007-2013.jugendinaktion.at XSS vulnerability

Open Bug Bounty ID: OBB-703373 Description| Value ---|--- Affected Website:| 2007-2013.jugendinaktion.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Session Hijacking

tomcat-util is vulnerable to session hijacking attacks. The vulnerability exists due to tomcat-util incorrectly treating single quotes as delimiters in cookies, allowing sensitive information such as session ID to be leaked. This issue is also CVE-2007-3385...

Session Hijacking

Apache Tomcat is vulnerable to session hijacking. Sensitive information such as the session ID can be leaked to remote attackers due to improper handling of double quotes " characters and encoded backslash %5C in the cookie value. This vulnerability exists due to an incomplete fix for CVE-2007-33...

PostgreSQL 7.4 < 7.4.19, 8.0 < 8.0.15, 8.1 < 8.1.11, 8.2 < 8.2.6 Multiple Vulnerabilities - Linux

PostgreSQL is prone to multiple Privilege Escalation and Denial of Service DoS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PostgreSQL < 7.3.19, 7.4.x < 7.4.17, 8.0.x < 8.0.13, 8.1.x < 8.1.9, and 8.2.x < 8.2.4 Untrusted Search Path Vulnerability - Windows

PostgreSQL is prone to an untrusted search path vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the update package for Communications Server 2007 R2, Web Components: September 2010

Describes a bug that is resolved in the update package for Office Communications Server 2007 R2, Web Components that is dated September 2010.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Components that is dated...

PHPMailer < 2.0.0 rc1 'SendmailSend' RCE Vulnerability

PHPMailer is prone to a remote code execution RCE vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2007-2617

creationtimestamp| type| source ---|---|--- 2018-09-21 01:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/solaris/escalate/srsexecreadline.rb 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:22+00:00| seen|...

Description of the cumulative update package for Communicator 2007 R2: June, 2011

Describes the bugs that are fixed in the June, 2011 cumulative update package for Communicator 2007 R2.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated June, 2011.This article describes the following...

Description of the cumulative update package for Communicator 2007 R2: July 2010

Describes the issues that are fixed in the July, 2010 cumulative update package for Communicator 2007 R2.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated July 2010.This article describes the followin...

Description of the update for Communicator 2007 R2: Oct 2009

Provides information about the update for Communicator 2007 R2 that is dated Oct 2009.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated Oct 2009.This article describes the following items about the...

Description of the cumulative update package for Communicator 2007 R2: April 2010

Describes the issues that are fixed in the cumulative update package for Communicator 2007 R2: April 2010.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated April 2010.This article describes the...

Description of the Communicator 2007 R2 cumulative update: January 2010

Describes the issue that is fixed in the Communicator 2007 R2 cumulative update that is dated January 2010.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issue that is fixed in the cumulative update that is dated January 2010.This article describes the following items abo...

Solaris srsexec Arbitrary File Reader

This module exploits a vulnerability in NetCommander 3.2.3 and 3.2.5. When srsexec is executed in debug -d verbose -v mode, the first line of an arbitrary file can be read due to the suid bit set. The most widely accepted exploitation vector is reading /etc/shadow, which will reveal root's hash f...

Microsoft Excel Viewer 2007 Service Pack 3 Multiple Vulnerabilities (KB4022195)

This host is missing an important security update according to Microsoft KB4022195 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel CVE-2018-8382 Information Disclosure Vulnerability

Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2010 Service Pack 2 32-bit editions Microsoft Excel 2010 Service Pack 2 64-bit...

Security Bulletin: Denial of service for accessing data using HTTP protocol on IBM SONAS (CVE-2007-6750)

Summary A fix is available for IBM SONAS, for the security issue of Denial of service for accessing data using HTTP protocol. Vulnerability Details CVEID: CVE-2007-6750 DESCRIPTION: SONAS supports data access using HTTP protocol. Apache HTTP Server is vulnerable to a denial of service. By sending...

Security Bulletin: IBM QRadar SIEM is vulnerable to path traversal attack. (CVE-2015-2007)

Summary A Path Traversal attack aims to access files and directories that are stored outside the web root folder. Vulnerability Details CVE-ID: CVE-2015-2007 Description: IBM QRadar could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL...