CVE-2014-8758

CVE-2014-8758: Cross-site scripting in WordPress Best Gallery Albums Plugin (before 3.0.70). The vulnerability is triggered via the order_id parameter in the gallery_album_sorting page (wp-admin/admin.php), allowing remote injection of script/HTML. Affected: Best Gallery Albums Plugin for WordPre...

Microsoft Exchange Server Multiple Vulnerabilities (KB4036108)

This host is missing an important security update according to Microsoft KB4036108 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-8758

Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability."...

CVE-2017-8758

CVE-2017-8758 concerns Microsoft Exchange Server (notably Exchange Server 2016 with OWA) where improper handling of web requests enables elevation of privilege. The vulnerability allows script/content injection via specially crafted emails or links, enabling an attacker to trick users and potenti...

Description of the security update for Microsoft Exchange: September 12, 2017

None None...

Security Updates for Exchange (September 2017)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who...

CVE-2016-8758

CVE-2016-8758 affects Huawei Mate8 devices via the ION memory management module. Affected models include NXT-AL10C00B561 and earlier, NXT-CL10C00B561 and earlier, NXT-DL10C00B561 and earlier, and NXT-TL10C00B561 and earlier. The issue allows a local attacker to trigger a denial-of-service/restart...

CVE-2015-8758

TYPO3 CVE-2015-8758 affects frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1. The vulnerability is a frontend XSS vulnerability allowing remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. Root cause: cross-site scripting in unspecified fr...