51365 matches found
Microsoft Exchange Server DlpUtils AddTenantDlpPolicy RCE
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exchange Server. Authentication is required to exploit this vulnerability. Additionally, the target user must have the "Data Loss Prevention" role assigned and an active mailbox. If the user is in th...
KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
Microsoft Excel Buffer Error Vulnerability
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft Excel 2013 Service Pack ...
Microsoft Diagnostics Hub Standard Collector Service Control Error Vulnerability
Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. An access control error vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are...
Microsoft Windows Bluetooth Service Security Vulnerability
Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. The following products and versions are affected:Windows Server, version 1909 Server Core installation,Windows 10 Version 1909 for...
Microsoft Graphics Component Information Disclosure Vulnerability
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows Server 2016 Server Core installation,Windows Server 2016,Windows 10...
Amazon Linux 2 : gd (ALAS-2021-1577)
The version of gd installed on the remote host is prior to 2.0.35-27. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1577 advisory. An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. A...
Huawei EulerOS: Security Advisory for perl-DBD-MySQL (EulerOS-SA-2021-1053)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: gd
Issue Overview: An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application,...
January 5, 2021, update for Project 2016 (KB4493159)
None None...
January 5, 2021, update for Office 2016 (KB4493157)
None None...
January 5, 2021, update for Access 2016 (KB4484509)
None None...
EulerOS Virtualization for ARM 64 3.0.2.0 : perl-DBD-MySQL (EulerOS-SA-2021-1053)
According to the version of the perl-DBD-MySQL package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI...
CVE-2016-20003
creationtimestamp| type| source ---|---|--- 2021-01-01 07:32:46+00:00| seen| https://t.me/cibsecurity/21503...
CVE-2016-20005
creationtimestamp| type| source ---|---|--- 2021-01-01 07:32:44+00:00| seen| https://t.me/cibsecurity/21502...
CVE-2016-20004
creationtimestamp| type| source ---|---|--- 2021-01-01 07:32:28+00:00| seen| https://t.me/cibsecurity/21490...
CVE-2016-20002
The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2016-20001
The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...