Google Chrome Out-of-Bounds Read (CVE-2016-1646)

An out of bounds read vulnerability exists in Google Chrome. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information and create a denial of service condition on the affected system...

Google Chrome Remote Code Execution (CVE-2016-5198)

A remote code execution vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

You only have nine months to ditch Exchange Server 2013

Microsoft has posted a reminder that Exchange Server 2013 reaches End of Support EoS on April 11, 2023. Thats a little more than 9 months from now. A useful and timely reminder, since we all realize that it takes some time to migrate to a different system. Every Windows product has a lifecycle. T...

CVE-2022-23081

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2016-4977

creationtimestamp| type| source ---|---|--- 2022-06-20 01:10:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2540...

SAP NetWeaver J2EE Engine SQL Injection (CVE-2016-2386)

An SQL injection vulnerability exists in SAP NetWeaver J2EE Engine. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

SAP NetWeaver AS Java Information Disclosure (2256846)

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.1 to 7.5, allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Security Updates for Microsoft Office Products C2R (June 2022)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a remote code execution vulnerability. An authenticated attacker can exploit this to execute arbitrary code on the system. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2016-6556

OpenNMS CVE-2016-6556 affects version 18.0.1 and earlier, due to insufficient filtering of SNMP agent data (sysName/sysContact), enabling stored XSS when web UI data is viewed. The issue was fixed in version 18.0.2 (Sept 20, 2016). No exploitation details are provided in the sources. The related ...

CVE-2016-6555

OpenNMS vulnerability CVE-2016-6555 affects OpenNMS 18.0.1 and earlier, where SNMP trap data is not properly filtered, enabling a stored XSS payload that triggers when a user views the events list in the web UI. The issue is mitigated by upgrading to version 18.0.2 (released 2016-09-20). The desc...

Important: Red Hat Security Advisory: cups security and bug fix update

An update for cups is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

cups security and bug fix update

An update is available for cups. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Common UNIX Printing System CUPS provides a portable printing layer for Linu...

RLSA-2022:5056 Important: cups security and bug fix update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: authorization bypass when using "local" authorization CVE-2022-26691 For more details about the security issues, including the impact, a CVSS score,...

USN-4767-1: Zabbix vulnerabilities

Fu Chuang discovered that Zabbix did not properly parse IPs. A remote attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2020-11800 It was discovered that Zabbix incorrectly handled certain...

Microsoft Excel 2016 Remote Code Execution Vulnerability (KB5002208)

This host is missing a critical security update according to Microsoft KB5002208 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

2022-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5014702)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

KB5014365 - Description of the security update for SQL Server 2016 SP2 GDR: June 14, 2022

None None...

Description of the security update for Excel 2016: June 14, 2022 (KB5002208)

None None...

KB5014355 - Description of the security update for SQL Server 2016 SP3 GDR: June 14, 2022

None None...

Microsoft Windows 日志信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows PowerShell. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...