12170 matches found
Microsoft Excel 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011602)
This host is missing an important security update according to Microsoft KB4011602 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Update for Microsoft Office Compatibility Pack Service Pack 3 (KB4011607)
A security vulnerability exists in Microsoft Office Compatibility Pack Service Pack 3 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
January 3, 2018—KB4056890 (OS Build 14393.2007)
None None...
Description of the security update for 2007 Microsoft Office Suite: January 9, 2018 (KB4011201)
None None...
Description of the security update for Outlook 2007: January 9, 2018
Description of the security update for Outlook 2007: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018 (KB4011605)
None None...
RHEL 7 : qemu-kvm-rhev (RHSA-2018:0028)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0028 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...
RHEL 7 : redhat-virtualization-host (RHSA-2018:0044) (Meltdown) (Spectre)
An update for redhat-virtualization-host is now available for RHEV 3.X Hypervisor and Agents for RHEL-7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Joomla CMS Real Estate 1.5 SQL Injection
Title: Joomla! CMS Real Estate 1.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cms-realestate.com URL: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/cms-real-estate/ Product: 'Joomla! CMS Real Estate 1.5 - SQL injection' Developer: JoomlaUX Extensio...
Joomla JMultipleHotelReservation 6.0.5 SQL Injection
Title: Joomla JMultipleHotelReservation 6.0.5 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/joomla-hotel-portal URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jmultiplehotelreservation/ Product: 'Joomla...
Windows 2008 January 3 2018 Multiple Security Updates
The remote Windows host is missing multiple security updates released on 2018/01/03. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerabilities exists in the way that the Color Management Module ICM32.dll handles objects in memory. This vulnerability allo...
SUSE SLES11 Security Update : kernel (SUSE-SU-2018:0011-1) (Meltdown) (Spectre)
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory bnc1068032. - CVE-2017-5753: Local attackers on systems with...
CPU hardware vulnerable to side-channel attacks
Overview CPU hardware implementations are vulnerable to cache side-channel attacks. These vulnerabilities are referred to as Meltdown and Spectre. Description CPU hardware implementations are vulnerable to side-channel attacks referred to as Meltdown and Spectre. Both Spectre and Meltdown take...
CVE-2017-1000480
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...
Code injection
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...
CVE-2017-1000480
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...
CVE-2017-1000480
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...
CVE-2017-1000480
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...
attra.ncat.org XSS vulnerability
Open Bug Bounty ID: OBB-483412 Description| Value ---|--- Affected Website:| attra.ncat.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...
sexi-devil.com XSS vulnerability
Open Bug Bounty ID: OBB-483082 Description| Value ---|--- Affected Website:| sexi-devil.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...