macOS : Apple Safari < 12.1.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.1 It is, therefore, affected by multiple vulnerabilities. - Multiple out-of-bound errors exist in WebKit, due to improper memory handling. An unauthenticated, remote attacker can exploit this, via speciall...

KLA11490 Multiple vulnerabilities in iCloud

Multiple vulnerabilities were found in iCloud. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...

KLA11489 Multiple vulnerabilities in iTunes

Multiple vulnerabilities were found in iTunes. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...

Apple TV 12.0.0 and < 12.3 Multiple Vulnerabilities

Binary data 700719.prm...

Apple iOS < 12.3 Multiple Vulnerabilities

Binary data 700713.prm...

macOS 10.x < 10.14.5 Multiple Vulnerabilities (APPLE-SA-2019-05-09)

Binary data 700667.prm...

Apple Safari 12.x < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2019-05-09)

Binary data 700666.prm...

CVE-2018-8628

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint...

CVE-2018-8628

CVE-2018-8628 is a remote code execution vulnerability affecting Microsoft PowerPoint and related Office components (Office, SharePoint, PowerPoint Viewer, etc.) caused by improper handling of objects in memory. The Nessus/OpenVAS entries confirm the vulnerability across PowerPoint and Office pro...

Microsoft Office Compatibility Pack Service Pack 3 Remote Code Execution Vulnerability (KB4011207)

This host is missing an important security update according to Microsoft KB4011207 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft PowerPoint 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4461481)

This host is missing an important security update according to Microsoft KB4461481 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018

Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (December 2018)

The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to...

RHEL 7 : atomic-openshift-utils (RHSA-2016:2778)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2778 advisory. Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud...

ansible-flow (0.1.0), cloudmesh-client (>=4.2.6, <=4.4.0) +4 more potentially affected by CVE-2016-8628 via ansible (>=1.9.4, <=2.1.2.0)

ansible PYPI version =1.9.4, =4.2.6, =0.0.11, =0.1.4, =1.0.0, =0.1.7, =0.1.14 Source cves: CVE-2016-8628 Source advisory: GHSA-JG4F-JQM5-4MGQ...

CVE-2016-8628

Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as...

cloudmesh-client (>=4.2.6, <=4.4.0), k8sdc (>=0.0.11, <=0.0.20) +2 more potentially affected by CVE-2016-8628 via ansible (>=2.0.0.0, <=2.1.2.0)

ansible PYPI version =2.0.0.0, =4.2.6, =0.0.11, =0.1.4, =0.1.7, =0.1.14 Source cves: CVE-2016-8628 Source advisory: OSV:PYSEC-2018-38...

CVE-2016-8628

Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as...

UBUNTU-CVE-2016-8628

Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as...

ansible-flow (0.1.0), cloudmesh-client (>=4.2.6, <=4.4.0) +4 more potentially affected by CVE-2016-8628 via ansible (>=1.9.4, <=2.1.2.0)

ansible PYPI version =1.9.4, =4.2.6, =0.0.11, =0.1.4, =1.0.0, =0.1.7, =0.1.14 Source cves: CVE-2016-8628 Source advisory: MEND:CVE-2016-8628...