Remote code execution

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151...

CVE-2018-8151

CVE-2018-8151 is an information disclosure vulnerability in Microsoft Exchange Server caused by improper handling of objects in memory. The issue enables information disclosure without exploitation details in the provided documents. Affected product is Microsoft Exchange Server; root cause is mem...

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...

Update Rollup 21 for Exchange Server 2010 Service Pack 3

Update Rollup 21 for Exchange Server 2010 Service Pack 3 Summary This update rollup is a security update. This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: : Microsoft Common...

KLA11242 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper handling of objects in...

Security Advisory - Authentication Bypass Vulnerability in Huawei Honor 5S Smart Phones

Huawei Honor 5S smart phones have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without...

Juniper Networks Junos OS Multiple cURL and libcurl Vulnerabilities

Junos OS is prone to multiple vulnerabilities in cURL and libcurl. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"...

CVE-2015-8151

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 is affected by CVE-2015-8151, a web UI command-injection vulnerability. An authenticated remote user with console administrator access can cause arbitrary OS commands to run with elevated privileges due to improper input sanitization ...

CVE-2014-8151

CVE-2014-8151 affects libcurl’s DarwinSSL (SecureTransport) back-end. The darwinssl_connect_step1 function fails to verify whether a cached TLS session validated the certificate when the session is reused, enabling MITM-style server spoofing via crafted certificates. Documented impact is limited ...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8151)

IBM Java 1.4.2 SR13 FP12 has been released, fixing various bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ has more informations. CVEs addressed: CVE-2011-3563 / CVE-2012-0499 / CVE-2012-0502 / CVE-2012-0503 / CVE-2012-0505 / CVE-2012-0506 %NASLMINLEVEL 70300 C Tenabl...