58 matches found
CVE-2018-8553
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...
Microsoft Windows Graphics Component CVE-2018-8553 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code on a target system. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 fo...
Microsoft Graphics Components Remote Code Execution (CVE-2018-8553)
A remote code execution vulnerability exists in Microsoft Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
KB4467700: Windows Server 2008 November 2018 Security Update
The remote Windows host is missing security update 4467700 or cumulative update 4467706. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability...
CVE-2017-8553
Technical details about CVE-2017-8553 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Connected items discuss other updates/CVEs; no explicit details for this CVE are present. Monitor for updates.
Microsoft Windows Multiple Vulnerabilities (KB4022722)
This host is missing a critical security update according to Microsoft KB4022722 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-8553
The CVE-2016-8553 entry is rejected/not used and does not represent an active vulnerability.
CVE-2015-8553
Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777...
CVE-2015-8553
Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777...
CVE-2015-8553
Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777...
CVE-2015-8553
CVE-2015-8553 is referenced in multiple connected Nessus entries as a Xen/Linux kernel memory-information disclosure vulnerability. The description stored with the CVE notes that guest OS users can obtain sensitive information from uninitialized host kernel memory because memory and I/O decoding ...
MantisBT 1.2.x < 1.2.18 Multiple Vulnerabilities
According to its version number, the MantisBT application hosted on the remote web server is 1.2.x prior to 1.2.18. It is, therefore, affected by the following vulnerabilities : - Multiple input-validation errors exist that could allow cross-site scripting attacks. CVE-2014-7146, CVE-2014-8986,...
Debian DSA-3120-1 : mantis - security update
Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...
Debian Security Advisory DSA 3120-1 (mantis - security update)
Multiple security issues have been found in the Mantis bug tracking system, which may result in phishing, information disclosure, CAPTCHA bypass, SQL injection, cross-site scripting or the execution of arbitrary PHP code. OpenVAS Vulnerability Test $Id: deb3120.nasl 6609 2017-07-07 12:05:59Z...
CVE-2014-8553
The mciaccountgetarraybyid function in api/soap/mcaccountapi.php in MantisBT before 1.2.18 allows remote attackers to obtain sensitive information via a 1 mcprojectgetusers, 2 mcissueget, 3 mcfiltergetissues, or 4 mcprojectgetissues SOAP request...
CVE-2014-8553
Affected software: MantisBT 1.2.x before 1.2.18. Vulnerability: information disclosure via SOAP requests (mc_project_get_users, mc_issue_get, mc_filter_get_issues, mc_project_get_issues) caused by mci_account_get_array_by_id in api/soap/mc_account_api.php. Impact: potential exposure of sensitive ...
