MS14-067: Vulnerabilities in XML Core Services could allow remote code execution: November 11, 2014

None None...

PT-2014-2028 · Microsoft · Windows Server 2008 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server versions 2003 SP2 through 2008 SP2 and R2 SP1 Microsoft Windows Vista version SP2 Microsoft Windows 7 version SP1 Microsoft Office version 2007 SP3 Description: The issue is related to the Input Method Editor IME...

Microsoft Windows TCP/IP CVE-2014-4076 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 x64 Edition Service Pack 2...

MS14-074: Vulnerability in Remote Desktop Protocol could allow security feature bypass: November 11, 2014

None None...

MS14-079: Vulnerabilities in kernel-mode driver could allow denial of service: November 11, 2014

None None...

MS14-071: Vulnerability in Windows Audio Service could cause Elevation of Privilege: November 11, 2014

None None...

MS14-064: Description of the security update for Windows OLE: November 11, 2014

None None...

CVE-2014-4077

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE aka IME for Japanese is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka “Microsoft IME Japanese...

XOOPS Module xhresim Remote SQL Injection (CVE-2008-5665)

An SQL injection vulnerability has been reported in Xoops. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Wordpress Download Manager Plugin Arbitrary File Upload (CVE-2008-3362)

An Arbitrary File Upload vulnerability has been reported in Wordpress Download Manager Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

XOOPS articlephp SQL Injection (CVE-2008-2094)

An SQL injection vulnerability has been reported in Xoops Article Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_liveticker SQL Injection (CVE-2008-6148)

An SQL injection vulnerability has been reported in Raven-worx Liveticker. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component ds_syndicate SQL Injection (CVE-2008-4623)

An SQL injection vulnerability has been reported in Martin Diphoorn Ds-syndicate. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_yvcomment SQL Injection (CVE-2008-2692)

An SQL injection vulnerability has been reported in Joomla Com Yvcomment. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_contact Info SQL Injection (CVE-2008-5494)

An SQL injection vulnerability has been reported in Digitalgreys Com Contactinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_jpad SQL Injection (CVE-2008-4715)

An SQL injection vulnerability has been reported in Myjoomla Jpad. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_flippingBook SQL Injection (CVE-2008-2095)

An SQL injection vulnerability has been reported in Mambo Com FlippingbookMambo Com Flippingbook. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Community com_comprofiler SQL Injection (CVE-2008-2093)

An SQL injection vulnerability has been reported in Mambo Com ComprofilerMambo Com Comprofiler. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_expshop SQL Injection (CVE-2008-2892)

An SQL injection vulnerability has been reported in Feellove Exp Shop ComponentFeellove Exp Shop Component. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_idoBlog Remote SQL Injection (CVE-2008-2627)

An SQL injection vulnerability has been reported in Joomla Com Idoblog. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...