Microsoft Office Excel Multiple Remote Code Execution Vulnerabilities (3089664)

This host is missing a critical security update according to Microsoft Bulletin MS15-099. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Memory Corruption (MS15-099: CVE-2015-2520)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to the way Microsoft Office does not properly handle objects in memory. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...

Zhone GPON 2520 Input Validation Vulnerability

Zhone GPON 2520 is a Zhone solution based on the ITU-TG.984.x standard for broadband passive optical integrated access. A security vulnerability exists in the Zhone GPON 2520. The vulnerability can be exploited by a remote attacker to cause a denial of service with the help of an extra-long strin...

Ubuntu 14.04 LTS : CUPS vulnerability (USN-2520-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2520-1 advisory. Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash...

USN-2520-1 cups vulnerability

Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2015-2055

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter...

CVE-2015-2055

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter...

CVE-2015-2055

Affected product: Zhone GPON 2520 with firmware R4.0.2.566b. Vulnerability: Input validation flaw in the oldpassword parameter that allows a remote attacker to cause a denial of service. Impact: Denial of service; no information on exploitation details provided in the sources. Notes: Connected CN...

CVE-2014-2520

OpenText/OpenText Documentum Content Server is affected by CVE-2014-2520 in Oracle DB deployments, where the DQL engine fails to properly restrict DQL hints, enabling remote authenticated users to perform DQL injections and read sensitive data. Affected versions include EMC Documentum Content Ser...

openSUSE Security Update : libfreetype6 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

VulnCheck KEV: CVE-2012-2520

Cross-site scripting XSS vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2520)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2520 advisory. - mm/hotplug: correctly add new zone to all other nodes' zone lists Jiang Liu Orabug: 16603569 CVE-2012-5517 - ptrace: ptraceresume shouldn't wake ...

Oracle Linux 6 : system-config-firewall (ELSA-2011-0953)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0953 advisory. - fixed possible privilege escalation flaw via use of python pickle CVE-2011-2520, replaced pickle by json rhbz717985 Tenable has extracted the preceding...

Microsoft多个产品HTML过滤组件跨站脚本执行漏洞（MS12-066）

CVECAN ID: CVE-2012-2520 Microsoft是一家基于美国的跨国电脑科技公司。以研发、制造、授权和提供广泛的电脑软件服务业务为主。 Microsoft多个产品在HTML过滤组件内没有正确过滤某些输入即返给用户使用。成功利用此漏洞的攻击者可执行跨站脚本攻击并以当前用户权限运行脚本。 0 Microsoft SharePoint Server 2007 Microsoft Office Web Apps Microsoft Groove Server 2010 Microsoft Lync 2010 Microsoft Office Communicator 2007...

CVE-2012-2520

CVE-2012-2520 is a cross-site scripting vulnerability in Microsoft’s HTML sanitization component affecting multiple products (InfoPath 2007/2010, Communicator/Lync 2010, SharePoint Server/Foundation, Groove Server, Office Web Apps). The issue arises from improper input filtering in the HTML sanit...

Debian Security Advisory DSA 2520-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2520-1. OpenVAS Vulnerability Test $Id: deb25201.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2520-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian: Security Advisory (DSA-2520-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2520-1 : openoffice.org - Multiple heap-based buffer overflows

Timo Warns from PRE-CERT discovered multiple heap-based buffer overflows in OpenOffice.org, an office productivity suite. The issues lies in the XML manifest encryption tag parsing code. Using specially crafted files, an attacker can cause application crash and could cause arbitrary code executio...

RedHat Update for system-config-firewall RHSA-2011:0953-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for system-config-firewall RHSA-2011:0953-01

Check for the Version of system-config-firewall OpenVAS Vulnerability Test RedHat Update for system-config-firewall RHSA-2011:0953-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...