Vulnerability of Mac OS X and iOS operating systems, allowing attackers to read arbitrary files

The vulnerability of operating systems Mac OS X and iOS is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted iBook file containing links to external XML...

Microsoft Windows JScript External Object Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code in applications using the JScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability in that th...

The vulnerability of the SAP NetWeaver software integration platform allows a perpetrator to trigger a service failure or induce the system to access external resources.

The vulnerability of the SAP NetWeaver software integration platform exists due to the lack of access restrictions on external objects contained in the links within the processed XML files. Exploiting this vulnerability can allow a malicious actor to cause service failures or induce the system to...

Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability

This host is installed with Microsoft Office Power Point and is prone to remote code execution vulnerability. This NVT has been replaced by NVT secpodms11-022.nasl OID:1.3.6.1.4.1.25623.1.0.902411. OpenVAS Vulnerability Test $Id: gbmspowerpointcodeexecvuln.nasl 6538 2017-07-05 11:38:27Z cfischer ...

(0Day) Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Powerpoint 2007. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with t...

security flaw

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox...