64 matches found
CVE-2016-3280
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...
CVE-2016-3280
CVE-2016-3280 is a Microsoft Office/Word memory-corruption vulnerability that allows remote code execution via crafted Office documents. The CVE affects Word and related components across multiple platforms (Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for ...
Microsoft Office Word Multiple Vulnerabilities (3170008)
This host is missing a critical security update according to Microsoft Bulletin MS16-088 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Memory Corruption (MS16-088: CVE-2016-3280)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...
CVE-2015-3280
OpenStack Compute (Nova) vulnerability CVE-2015-3280: when an authenticated user deletes an instance that is in the resize state, the original instance may not be deleted from the compute node, enabling a denial of service (disk depletion). This affects OpenStack Nova deployments such as OpenStac...
Debian DSA-3280-1 : php5 - security update
Multiple vulnerabilities have been discovered in PHP : - CVE-2015-4025 / CVE-2015-4026 Multiple function didn't check for NULL bytes in path names. - CVE-2015-4024 Denial of service when processing multipart/form-data requests. - CVE-2015-4022 Integer overflow in the ftpgenlist function may resul...
CVE-2014-3280
CVE-2014-3280 affects Cisco VOSS CDM (Cisco Unified Communications Domain Manager) versions 9.0(.1) and earlier. The issue is an improper access-control enforcement in the web framework, allowing remote authenticated users to access potentially sensitive user information by visiting an unspecifie...
CVE-2012-3280
Technical details (affected products/versions, root cause, fix) are not provided in the initial or connected documents. No concrete technical information is available here; monitor for updates and future disclosures.
CVE-2011-3280
CVE-2011-3280 describes memory-leak DoS vulnerabilities in Cisco IOS/NAT translating SIP and related SIP/H.323 traffic. Affected: IOS 12.1–12.4 and 15.0–15.1, and IOS XE 3.1.xSG. Attack: crafted SIP packets to UDP port 5060 can cause memory exhaustion or device reload; also related UDP/TCP varian...
SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3276 / 3280 / 3284)
This SUSE Linux Enterprise 11 Service Pack 1 kernel contains various security fixes and lots of other bugfixes. The following security issues were fixed : - local users could crash the system by causing a NULL deref in the keyctlsessiontoparent function. CVE-2010-2960 - local users could crash th...
CVE-2010-3280
The CVE-2010-3280 issue affects Alcatel-Lucent OmniTouch Contact Center Standard Edition, specifically the CCAgent option in the TSA/management server. The root cause is client-side authorization checking that results in the SuperUser password being sent to the client, enabling an attacker with a...
Microsoft Internet Explorer Cross Domain Information Disclosure (MS06-042; CVE-2006-3280)
Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. Internet Explorer has numerous built-in mechanisms that enforce security policies which are...
BELL-CVE-2009-3280 CVE-2009-3280 does not affect BellSoft software
Bulletin has no description...
CVE-2009-3280
The CVE-2009-3280 issue affects the Linux kernel CFG80211 code. Specifically, an Integer signedness error in the find_ie function inside net/wireless/scan.c can be triggered by malformed packets, leading to a denial of service (soft lockup). Affected version range is before 2.6.31.1-rc1. Multiple...
Mandriva Update for postgresql MDKSA-2007:188 (postgresql)
Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:188 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Mandriva Update for postgresql MDKSA-2007:188 (postgresql)
Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:188 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Fedora Core 10 FEDORA-2009-3280 (moodle)
The remote host is missing an update to moodle announced via advisory FEDORA-2009-3280. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2008-3280
creationtimestamp| type| source ---|---|--- 2008-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5720...
[ MDKSA-2007:188 ] - Updated postgresql packages prevent access abuse using dblink
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:188 http://www.mandriva.com/security/ Package : postgresql Date : September 25, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: PostgreSQL 8.1 and probably later and earlier...
Mandrake Linux Security Advisory : postgresql (MDKSA-2007:188)
PostgreSQL 8.1 and probably later and earlier versions, when local trust authentication is enabled and the Database Link library dblink is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from...