15 matches found
EUVD-2025-36762
Malicious code in sort-class-members npm...
MAL-2025-36762 Malicious code in textbooks (npm)
The package textbooks was found to contain malicious code...
CVE-2021-36762
An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd:tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet...
Security Updates for Microsoft Word Products C2R Multiple Vulnerabilities (September 2023)
The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2023-36762 - An information disclosure vulnerability. CVE-2023-36761 Note that Nessus has not tested for these issues but has instea...
Microsoft Word 2016 Multiple Vulnerabilities (KB5002497)
This host is missing a critical security update according to Microsoft KB5002497 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-36762
CVE-2023-36762 is a Microsoft Word remote code execution vulnerability. The available documents confirm an impact on Word and related Word components, with an exploit path requiring user interaction and local access (CVSS 3.1: AV=L, AC=L, PR=None, UI=Required, C/H/I/H/A=L). Public details note po...
CVE-2023-36762 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2023-36762 Microsoft Word Remote Code Execution Vulnerability
...
End of support for Office 2016 and Office 2019
None None...
Security Updates for Microsoft SharePoint Server 2016 (September 2023)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2023-36764 - A remote code execution...
CVE-2020-36762
creationtimestamp| type| source ---|---|--- 2023-07-18 18:32:44+00:00| seen| https://t.me/cibsecurity/66910...
CVE-2020-36762
CVE-2020-36762 affects the ONS Digital RAS Collection Instrument up to version 2.0.27. The root cause is a command-injection vulnerability in the function jobs of the file .github/workflows/comment.yml , caused by manipulation of the argument $COMMENT_BODY . This leads to OS command execution. Th...
CVE-2021-36762
creationtimestamp| type| source ---|---|--- 2021-08-19 16:17:53+00:00| seen| https://t.me/cibsecurity/27583...
CVE-2021-36762
An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd:tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet...
CVE-2021-36762
CVE-2021-36762 affects HCC Embedded InterNiche NicheStack and NicheLite up to version 4.3. The tfshnd():tftpsrv.c TFTP packet processing function may read beyond the protocol buffer when a filename isn’t properly NULL-terminated, enabling out-of-bounds reads and potential DoS. Impact is described...