4449 matches found
Remote code execution
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'...
CVE-2020-0961
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'...
CVE-2020-0961
Summary (supported by provided documents): CVE-2020-0961 is a remote code execution vulnerability in the Microsoft Office Access Connectivity Engine that occurs when the engine improperly handles memory objects. The Nessus plugin for Office C2R April 2020 explicitly lists CVE-2020-0961 among mult...
CVE-2020-0961: Undefined Security Weakness
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'...
File Transfer iFamily 2.1 - Directory Traversal
Title: File Transfer iFamily 2.1 - Directory Traversal Author: Vulnerability Laboratory Date: 2020-04-15 Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== File Transfer iFamily v2.1 - Directory Traversal Vulnerability References Source:...
OracleVM 3.3 : ipmitool (OVMSA-2020-0012)
The remote OracleVM system is missing necessary patches to address critical security updates : - Backport fix for CVE-2020-5208 - Fix missing return in ipmikontronoemmain - CID1261317 - rebase to latest stable upstream version - resolves: rhbz1253416 - remove the redundant OpenIMPI dependency -...
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by entici...
PT-2020-2092
Name of the Vulnerable Software and Affected Versions Microsoft Office Access Connectivity Engine affected versions not specified Description A remote code execution issue exists due to the improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow...
Denial Of Service (DoS)
The kernel is vulnerable to Denial Of Service DoS. Memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease...
CVE-2018-1000805
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity...
CVE-2020-1639
When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance Ethernet OAM packet to a target device, it may improperly handle the incoming malformed data and fail to sanitize this incoming data resulting in an overflow condition. This overflow condition in Juniper...
March 30, 2020âKB4554349 (OS Build 17134.1401)
None None...
Storefront | Unable To Join Secondary Storefront Server To Server Group.
ERROR: Unable to join server in existing server group. Add server failed - Add of server XYZ to server group failed. In event logs we could see 'access is denied' exception while running the command : 'Add-DSCertificateToDSStore'...
Workspace App for Mac 20.02 - Installation fails on Mac Devices with no internet connectivity
Workspace App for Mac 20.02 will fail to install on Mac devices with no internet connectivity...
WAGO PFC 200 Operating System Command Injection Vulnerability
The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An operating system command injection vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability stems from a...
WAGO PFC200 Input Validation Error Vulnerability
The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An input validation error vulnerability exists in the cloud connectivity feature in WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. An attacker could exploit this vulnerability to ga...
WAGO PFC200 Operating System Command Injection Vulnerability
The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An operating system command injection vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 with firmware versions 03.02.0214, 03.01.0713, and 03.00.3912, where an attacker can execute illeg...
WAGO PFC 200 Data Forgery Problem Vulnerability
The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A remote code execution vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability can be exploited by an attacke...
CVE-2019-5160
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized...
CVE-2019-5161
An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.0214, 03.01.0713, and 03.00.3912. A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges...