EulerOS Virtualization 2.9.1 : mariadb-connector-c (EulerOS-SA-2023-1197)

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

Description of the security update for SharePoint Enterprise Server 2016: January 10, 2023 (KB5002338)

None None...

Description of the security update for Visio 2016: January 10, 2023 (KB5002337)

None None...

Description of the security update for Excel 2016: January 10, 2023 (KB5002322)

None None...

KB5022289: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2023)

The remote Windows host is missing security update 5022289. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

KLA20157 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Offi...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1063)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-15016

CVE-2016-15016 affects the Joomla plugin joomla_mod_einsatz_stats (versions up to 0.2). The vulnerability is in the helper.php function getStatsByType, where manipulating the year parameter leads to SQL injection. A fix is available in version 0.3, with the patch identified as 27c1b443cff45c81d9d...

CVE-2016-15015

CVE-2016-15015 affects viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. The vulnerability is in verify (src/Webhook.php) and exposes observable timing discrepancy, enabling potential information disclosure. Exploitation details are not provided beyond timing differences; attack complexity...

CVE-2016-15013

creationtimestamp| type| source ---|---|--- 2023-01-08 06:12:01+00:00| seen| https://t.me/cibsecurity/56118...

CVE-2016-15014

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:11+00:00| seen| https://t.me/cibsecurity/56124...

CVE-2016-15014

Summary: CVE-2016-15014 affects the CESNET theme-cesnet for ownCloud up to version 1.x. The issue concerns an unknown function in cesnet/core/lostpassword/templates/resetpassword.php that results in insufficiently protected credentials. Exploitation is described as local-only. The recommended fix...

CVE-2016-15013 ForumHulp searchresults listener.php list_keywords sql injection

A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...

CVE-2016-15013

CVE-2016-15013 affects ForumHulp searchresults, specifically the list_keywords function in event/listener.php. The vulnerability arises from accepting and manipulating the word parameter, enabling SQL injection. A patch is identified by the commit hash dd8a312bb285ad9735a8e1da58e9e955837b7322, an...

CVE-2016-15012 forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to...

CVE-2016-15012

CVE-2016-15012 affects SalesforceMobileSDK-Windows up to version 4.x. The vulnerability lies in the function ComputeCountSql within SalesforceSDK/SmartStore/Store/QuerySpec.cs, allowing SQL injection. Upgrading to version 5.0.0 addresses the issue (patch 83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8)....

CVE-2016-15011

creationtimestamp| type| source ---|---|--- 2023-01-06 12:19:53+00:00| seen| https://t.me/cibsecurity/56034...

CVE-2016-15011

The CVE-2016-15011 issue affects e-Contract dssp up to 1.3.1, specifically the function checkSignResponse in dssp-client/src/main/java/be/e_contract/dssp/client/SignResponseVerifier.java. The root cause is a vulnerability leading to XML External Entity (XXE) reference. A fix is available in dssp ...

CVE-2016-15010

creationtimestamp| type| source ---|---|--- 2023-01-05 12:23:51+00:00| seen| https://t.me/cibsecurity/55941...

CVE-2016-15009 OpenACS bug-tracker Search nav-bar.adp cross-site request forgery

A vulnerability classified as problematic has been found in OpenACS bug-tracker. Affected is an unknown function of the file lib/nav-bar.adp of the component Search. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is...