229 matches found
CVE-2016-2406
The permission control module in Huawei Document Security Management aka DSM before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button...
Code injection
The permission control module in Huawei Document Security Management aka DSM before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button...
CVE-2016-2406
The CVE-2016-2406 issue affects Huawei Document Security Management (DSM) prior to V100R002C05SPC670. The vulnerability is in the permission control module, where incorrect control of permissions on the PrintScreen button allows remote authenticated users to obtain sensitive information from encr...
MS17-011 and MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017
None None...
Huawei Document Security Manager Information Disclosure Vulnerability
Huawei Document Security Manager is a set of document rights management software from Huawei in China. A vulnerability exists in Huawei Document Security Manager that can be exploited by remote attackers to obtain sensitive information...
Security Advisory - Information Disclosure Vulnerability in the DSM
Huawei Document Security Management DSM provides document permission control. A vulnerability in the permission control module of DSM could lead to incorrect control over specific permissions on encrypted documents. Vulnerability ID：HWPSIRT-2015-12030 This vulnerability has been assigned Common...
Huawei Document Security Management Local Information Disclosure Vulnerability
Huawei Document Security Management DSM is a set of document rights management software from Huawei, China. The software is characterized by high stability, reliability and scalability. A security vulnerability exists in Huawei DSM using software versions prior to V100R002C05SPC661, which stems...
CVE-2015-8303
Huawei Document Security Management DSM with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file...
Enter: GA code not verified on the server side allows sending Verification Documents on behalf of another user
Host api.romit.io Endpoint /v0/cash/auth/login/verify Issue The GA Code is not verified on the server side for the users whose "Verification application" has been DENIED by the Romit support Team PoC 1. Setup an account at app.romit.io, use your apiKey, apiSecret and Location-ID to setup. 2. Now...
Server: Improper authorization checks in documents
Due to not verifying whether an user has permission to rename files of other users an authenticated user could rename files of other users without permission. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
Threat Outbreak Alert: Fake Official Documents Notification Email Messages on January 13, 2014
Medium Alert ID: 32418 First Published: 2014 January 14 15:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain official documents for the recipient. The text in the email message attempts to convince the recipient to open...
CVE-2012-3455
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...
CVE-2010-3452
CVE-2010-3452 is a use-after-free in OpenOffice.org’s oowriter that can crash the application or, potentially, allow arbitrary code execution via crafted RTF tags. Affected: OpenOffice.org 2.x/3.x before 3.3. Remediation: apply vendor security updates; advisories from multiple vendors (openSUSE/S...
Buffer overflow
Buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document...
CVE-2008-4581
CVE-2008-4581 affects IBM ENOVIA SmarTeam Editor: 5.x before release 18 SP5 and 19.x before SP01. It allows remote authenticated users to bypass access restrictions and read Document objects via the Workflow Process (Flow Process) view. Root cause described as an access-control bypass on the Work...
acroread -- insecure temporary file creation
Secunia Research reports: Secunia has discovered a security issue in Adobe Reader for Linux, which can be exploited by malicious, local users to gain knowledge of sensitive information. The problem is caused due to temporary files being created with permissions based on a user's umask in the "/tm...
adv_microsoft_word_protection.txt
Guardeonic Solutions AG Thorsten Delbrouck http://www.guardeonic.com/ Security Advisory 01-2004 Advisory Name: Microsoft Word Form Protection Bypass Release Date: 2004-01-02 Affected Product: Microsoft Word Platform: Microsoft Windows, probably Apple Mac OS Version: tested on 2000, 2002 XP, 2003,...
Web Protector 2.0 - Trivial Encryption
source: https://www.securityfocus.com/bid/7409/info Web protector has been reported prone to a trivial encryption weakness. It has been reported that the method used to obfuscate and protect the HTML source of web pages implementing Web Protector is flawed and may be easily reversed. This weaknes...
Lotus Domino View ACL by-pass (#NISR29102001C)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino View ACL by-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Possibly high Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Advisory number:...