Microsoft Publisher 2016 Remote Code Execution Vulnerability (KB4011097)

This host is missing an important security update according to Microsoft KB4011097 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Security Updates for Microsoft Office Web Apps (April 2020)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...

Microsoft Word and Microsoft Outlook Buffer Overflow Vulnerability

Microsoft Word and Microsoft Outlook are both products of Microsoft Corporation.Microsoft Word is a set of word processing software in the Office suite.Microsoft Outlook is a set of e-mail applications. Microsoft Word and Microsoft Outlook have security vulnerabilities. An attacker could exploit...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-18523)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. An attacker could exploit the vulnerability to perform an action in the context of the current user...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-19916)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A security vulnerability exists in Microsoft Word that stems from the program's inability to properly handle memory objects. The vulnerability can be exploited by an attacker with a specially...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2020-20365)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2020-16694)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from Microsoft Edge failing to properly access objects in memory. An attacker can exploit the vulnerability to execute arbitrary code i...

Microsoft Azure DevOps Server Cross-Site Scripting Vulnerability (CNVD-2020-19008)

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Azure DevOps Server that stems from the...

Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles memory objects in Microsof...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-18392)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CNVD-2020-19968)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 11. An attacker could exploit this vulnerability to...

Microsoft Word Remote Code Execution Vulnerabilities (KB4484231)

This host is missing an important security update according to Microsoft KB4484231. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Edge Memory Corruption Vulnerability

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Cisco UCS Manager Software Operating System Command Injection Vulnerability

The Cisco UCS 6400 Series Fabric Interconnects is a 6400 series switching matrix device from Cisco USA. An operating system command injection vulnerability exists in the local management CLI in Cisco UCS Manager Software, which stems from the program's failure to perform sufficient input validati...

Red Lion Crimson Type Confusion (CVE-2019-10996; CVE-2019-10984)

A type confusion vulnerability exists in Red Lion Crimson. Successful exploitation of this vulnerability could result in the execution of arbitrary code in the context of the current user...

Cisco Unified Communications Manager Privilege Escalation

The vulnerability of the Cisco Unified Communications Manager’s administration web interface is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on behalf of the current user through a specially created link...

Updated flash-player-plugin packages fix security vulnerability

Updated flash-player-plugin package fixes a security vulnerability: Type confusion that leads to arbitrary code execution in the context of the current user. CVE-2020-3757...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2020-08118)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem in the way the ChakraCore scripting engine handles objects in memory. An attacker can exploit the vulnerability to execu...

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel that stems from the software's failure to properly handle objects in memory. An attacker can exploit the vulnerability to run arbitrary code...