51002 matches found
Microsoft Excel 安全漏洞
Microsoft Excel is a powerful spreadsheet software developed by Microsoft. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on the system...
Microsoft Storvsp.sys Driver 安全漏洞
Microsoft Storvsp.sys Driver is a virtual storage bus driver from Microsoft Corporation USA. It is primarily used for virtual storage communication between virtual machines and hosts in Hyper-V virtualized environments. A security vulnerability exists in Microsoft Storvsp.sys Driver. An attacker...
Microsoft Windows DirectX 竞争条件问题漏洞
Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Windows DirectX. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are...
Microsoft Office 资源管理错误漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
KB5070247: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 11, 2025
None None...
Microsoft Windows Routing and Remote Access Service 安全漏洞
Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...
Advisory ROSA-SA-2025-3048
Software: libxml2 2.9.7 OS: ROSA Virtualization 3.1 unaffected versions = libxml2-2.9.7-21.0.1.rv31.3 affected versions libxml2-2.9.7-21.0.1.1.rv31.3 CVE-ID: CVE-2016-3709 BDU-ID: CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Libxml2 library is related to the failure to take measures to...
SUSE CVE-2016-11066
An issue was discovered in Mattermost Server before 3.2.0. The initialload API disclosed unnecessary personal information...
SUSE CVE-2016-11067
An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang...
SUSE CVE-2016-11068
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...
SUSE CVE-2016-11072
An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled...
SUSE CVE-2016-11073
An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting...
SUSE CVE-2016-11074
An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused...
CLSA-2025-1762544268 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...
CLSA-2025-1762540173 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...
erlang-28.1.1-1.1 on GA media (moderate)
erlang-28.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15706-1 Rating: moderate Cross-References: CVE-2016-1000107 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the erlang-28.1.1-1....
CVE-2016-15049
Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...
CVE-2016-200017
creationtimestamp| type| source ---|---|--- 2025-10-31 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jerkgojm26...
CVE-2016-15053
Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...