Huawei EulerOS: Security Advisory for deltarpm (EulerOS-SA-2023-1217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2023-1197)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2023-1227)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Visio 2016 Multiple Vulnerabilities (KB5002337)

This host is missing an important security update according to Microsoft KB5002337. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

EulerOS Virtualization 2.9.0 : mariadb-connector-c (EulerOS-SA-2023-1227)

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

EulerOS Virtualization 2.9.1 : mariadb-connector-c (EulerOS-SA-2023-1197)

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

Description of the security update for Visio 2016: January 10, 2023 (KB5002337)

None None...

Description of the security update for SharePoint Enterprise Server 2016: January 10, 2023 (KB5002338)

None None...

KB5022289: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2023)

The remote Windows host is missing security update 5022289. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

Description of the security update for Excel 2016: January 10, 2023 (KB5002322)

None None...

KLA20157 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Offi...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1063)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-15016

CVE-2016-15016 affects the Joomla plugin joomla_mod_einsatz_stats (versions up to 0.2). The vulnerability is in the helper.php function getStatsByType, where manipulating the year parameter leads to SQL injection. A fix is available in version 0.3, with the patch identified as 27c1b443cff45c81d9d...

CVE-2016-15015

CVE-2016-15015 affects viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. The vulnerability is in verify (src/Webhook.php) and exposes observable timing discrepancy, enabling potential information disclosure. Exploitation details are not provided beyond timing differences; attack complexity...

CVE-2016-15013

creationtimestamp| type| source ---|---|--- 2023-01-08 06:12:01+00:00| seen| https://t.me/cibsecurity/56118...

CVE-2016-15014

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:11+00:00| seen| https://t.me/cibsecurity/56124...

CVE-2016-15014

Summary: CVE-2016-15014 affects the CESNET theme-cesnet for ownCloud up to version 1.x. The issue concerns an unknown function in cesnet/core/lostpassword/templates/resetpassword.php that results in insufficiently protected credentials. Exploitation is described as local-only. The recommended fix...

CVE-2016-15013 ForumHulp searchresults listener.php list_keywords sql injection

A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...

CVE-2016-15013

CVE-2016-15013 affects ForumHulp searchresults, specifically the list_keywords function in event/listener.php. The vulnerability arises from accepting and manipulating the word parameter, enabling SQL injection. A patch is identified by the commit hash dd8a312bb285ad9735a8e1da58e9e955837b7322, an...

CVE-2016-15012

CVE-2016-15012 affects SalesforceMobileSDK-Windows up to version 4.x. The vulnerability lies in the function ComputeCountSql within SalesforceSDK/SmartStore/Store/QuerySpec.cs, allowing SQL injection. Upgrading to version 5.0.0 addresses the issue (patch 83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8)....