49 matches found
EUVD-2025-38171
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxFwRulesController.ajaxDeviceFwRulesAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...
BELL-CVE-2025-38171
Bulletin has no description...
CVE-2025-38171
In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The createsinglethreadworkqueue doesn't return error pointers, it returns NULL. Also cleanup the workqueue on the error paths...
CVE-2025-38171
CVE-2025-38171 concerns a Linux kernel issue in the power: supply: max77705 path. The vulnerability arises because create_singlethread_workqueue() can return NULL instead of an error pointer, with missing or inadequate cleanup on error paths during probe. The remediation implemented fixes the wor...
CVE-2025-38171 power: supply: max77705: Fix workqueue error handling in probe
In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The createsinglethreadworkqueue doesn't return error pointers, it returns NULL. Also cleanup the workqueue on the error paths...
CVE-2025-38171
In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The createsinglethreadworkqueue doesn't return error pointers, it returns NULL. Also cleanup the workqueue on the error paths...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
Security Updates for Microsoft Office Products C2R (Aug 2024)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38169, CVE-2024-38170,...
Security Updates for Microsoft PowerPoint Products (August 2024)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38171 %NASLMINLEVEL 8090...
Microsoft Office for Mac Multiple Remote Code Execution Vulnerabilities (Aug 2024) - Mac OS X
This host is missing an important security update for Microsoft Office 2021 for Mac according to Microsoft security update August 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2024-38171
Microsoft PowerPoint Remote Code Execution Vulnerability...
CVE-2024-38171
creationtimestamp| type| source ---|---|--- 2024-08-13 18:05:01+00:00| seen| https://www.thezdi.com/blog/2024/8/13/the-august-2024-security-update-review...
CVE-2024-38171 Microsoft PowerPoint Remote Code Execution Vulnerability
...
CVE-2024-38171
CVE-2024-38171 is Microsoft PowerPoint Remote Code Execution vulnerability. The CVE entry indicates a PowerPoint RCE with a CVSSv3.1 base score of 7.8 (HIGH) and local attack vector requiring user interaction. Connected sources corroborate Windows/Office updates addressing CVE-2024-38171: a Augus...
KLA71479 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft PowerPoint can be exploit...
BIT-DOTNET-2023-38171 Microsoft QUIC Denial of Service Vulnerability
Microsoft QUIC Denial of Service Vulnerability...
BIT-DOTNET-SDK-2023-38171 Microsoft QUIC Denial of Service Vulnerability
Microsoft QUIC Denial of Service Vulnerability...
Security Updates for Microsoft Visual Studio Products (October 2023)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple denial of service vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...
Security Update for .NET Core SDK (October 2023)
The version of Microsoft .NET Core SDK installed on the remote host is 6.0.x prior to 6.0.123, 6.0.x prior to 6.0.318, 6.0.x prior to 6.0.414, 7.0.x prior to 7.0.112 or 7.0.x prior to 7.0.309 or 7.0.x prior to 7.0.402. It is, therefore, affected by multiple vulnerabilities, as follows: - A...