PT-2017-7976

Name of the Vulnerable Software and Affected Versions NetIQ IDM ServiceNow Driver version prior to 1.0.0.1 Description The issue is related to an information leak that could expose cryptographic attributes to logged-in users. Recommendations For versions prior to 1.0.0.1, update to version 1.0.0....

MS17-014: Description of the security update for SharePoint Server 2010 Office Web Apps: March 14, 2017

MS17-014: Description of the security update for SharePoint Server 2010 Office Web Apps: March 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS17-014: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: March 14, 2017 (KB3178677)

None None...

USN-3225-1: libarchive vulnerabilities

It was discovered that libarchive incorrectly handled hardlink entries when extracting archives. A remote attacker could possibly use this issue to overwrite arbitrary files. CVE-2016-5418 Christian Wressnegger, Alwin Maier, and Fabian Yamaguchi discovered that libarchive incorrectly handled...

DEBIAN-CVE-2017-6310

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...

[20170404] - Core - XSS Vulnerability

Inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...

Design/Logic Flaw

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files...

CVE-2016-8689

The readHeader function in archivereadsupportformat7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service out-of-bounds read via multiple EmptyStream attributes in a header in a 7zip archive...

CVE-2016-8689

The readHeader function in archivereadsupportformat7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service out-of-bounds read via multiple EmptyStream attributes in a header in a 7zip archive...

UBUNTU-CVE-2017-2618

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

CVE-2017-2618

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

PT-2017-15452 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.10 Description: A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty null write to this file can crash the system by causing the system to attempt ...

CVE-2015-8862

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted...

PT-2017-7494

Name of the Vulnerable Software and Affected Versions mustache versions prior to 2.2.1 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted. This can occur when attributes in mustache templates are...

PT-2017-7493

Name of the Vulnerable Software and Affected Versions handlebars versions prior to 4.0.0 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute that is not quoted. This occurs when attributes in handlebar templates are...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2017-2576

Technical details for CVE-2017-2576 are not publicly available in the provided documents; monitor for updates.

MS12-046: Description of the security update for Office 2010 (Vbe7.dll): July 10, 2012

MS12-046: Description of the security update for Office 2010 Vbe7.dll: July 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-046. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS14-017: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: April 8, 2014

MS14-017: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: April 8, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially...