MS15-099: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3089664)

The remote Windows host has a version of Microsoft Office, Excel, Excel Viewer, SharePoint Server, Microsoft Office Compatibility Pack, Microsoft Office Web Apps, and/or Microsoft SharePoint Foundation installed that is affected by one or more of the following vulnerabilities : - Multiple remote...

Microsoft Office Suite Remote Code Execution Vulnerabilities (3089664)

This host is missing a critical security update according to Microsoft Bulletin MS15-099. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VulnCheck KEV: CVE-2015-2545

Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2545-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2545-1 advisory. A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load...

CVE-2014-2545

CVE-2014-2545 affects TIBCO MFT Internet Server, MFT Command Center, Slingshot, and Vault, where versions prior to 7.2.2 (and Slingshot before 1.9.1; Vault before 1.0.1) expose sensitive information via a crafted HTTP request. Root cause is unclear in the provided documents beyond the effect on t...

Debian DSA-2545-1 : qemu - multiple vulnerabilities

Multiple vulnerabilities have been discovered in QEMU, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-2652 : The snapshot mode of QEMU -snapshot incorrectly handles temporary files used to store the current state, making ...

CVE-2011-2545

CVE-2011-2545 is a cross-site scripting (XSS) vulnerability in the SIP INVITE FROM field handling of Cisco SPA 8000/8800 (before 6.1.11), SPA2102 and SPA3102 (before 5.2.13), and SPA 500 series IP phones (before 7.4.9). Root cause: lack of input sanitization in the SIP INVITE FROM field. Impact: ...

Debian Security Advisory DSA 2384-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 2384-1. OpenVAS Vulnerability Test $Id: deb23841.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2384-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2384-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2384-1 [email protected] http://www.debian.org/security/ Luk Claes January 09, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2384-1] cacti security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2384-1 [email protected] http://www.debian.org/security/ Luk Claes January 09, 2012 http://www.debian.org/security/faq -...

CVE-2010-2545

Cacti before 0.8.7g contains multiple XSS vulnerabilities (including CVE-2010-2545) in various templates and admin paths. The GLSA notes remote script injection and the need to upgrade to the 0.8.8+ series as remediation; affected vectors include template name and numerous PHP/graph-related compo...

CVE-2009-2545

SQL injection vulnerability in Advanced Electron Forum AEF 1.x, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-2545

CVE-2009-2545 describes an SQL injection in Advanced Electron Forum (AEF) 1.x when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL through the filename field of an uploaded attachment. The available documents confirm the affected software and the un...

CVE-2008-2545

CVE-2008-2545 affects Skype 3.6.0.248 and earlier than 3.8.0.139. The issue is a case-sensitive comparison in the file: URI handling for dangerous extensions, which can bypass warning dialogs and potentially allow user-assisted remote code execution when a crafted file: URI with a mismatched case...

Immunity Canvas: PERSISM_REMOTE

Name| persismremote ---|--- CVE| CVE-2007-2545 Exploit Pack| CANVAS Description| Persism CMS Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: persism.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2545 CVE Name: CVE-2007-2545...

CVE-2007-2545

The CVE-2007-2545 issue affects Persism CMS 0.9.2 and earlier, enabling remote PHP code execution via PHP remote file inclusion. The root cause is unsanitized URLs passed to system[path] in modules/, specifically through these files: blocks/headerfile.php, files/blocks/latest_files.php, filters/h...

CVE-2006-2545

CVE-2006-2545 affects Xtreme Topsites 1.1. The vulnerability is described as multiple cross-site scripting (XSS) flaws accessible via the id parameter in stats.php and via unspecified inputs in lostid.php (likely the searchthis parameter), with one or more vectors possibly stemming from SQL injec...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...

CVE-2004-2545

CVE-2004-2545 affects Secure Computing Corporation Sidewinder G2 6.1.0.01. Described as a remote denial of service of the SMTP proxy triggered by an “extremely busy network.” The embedded monitoring sub-system reportedly restarts after the failure. No remediation or concrete exploitation details ...

CVE-2004-2545

Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service SMTP proxy failure via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts...