1074 matches found
Ocean CMS \admin\admin_collect.php page type parameter has SQL injection vulnerability
Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollect.php page type parameter SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information and can...
Microsoft SQL Server Information Disclosure Vulnerability (CNVD-2017-20513)
Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An information disclosure vulnerability exists in Analysis Services in Microsoft SQL Server. An attacker c...
August 8, 2017—KB4034672 (Security-only update)
None None...
KB4019092 - Description of the security update for SQL Server 2012 Service Pack 3 GDR: August 8, 2017
KB4019092 - Description of the security update for SQL Server 2012 Service Pack 3 GDR: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acce...
KB4032542 - Description of the security update for SQL Server 2014 Service Pack 1 CU: August 8, 2017
KB4032542 - Description of the security update for SQL Server 2014 Service Pack 1 CU: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acces...
August 8, 2017—KB4034666 (Security-only update)
None None...
KB4036996 - Description of the security update for SQL Server 2014 Service Pack 2 CU: August 8, 2017
KB4036996 - Description of the security update for SQL Server 2014 Service Pack 2 CU: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acces...
Description of the security update for the Microsoft JET Database Engine remote code execution vulnerability: October 10, 2017
None None...
Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: August 8, 2017
Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: August 8, 2017 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. To learn more about the vulnerability, ...
August 8, 2017—KB4034664 (Monthly Rollup)
None None...
KB4019089 - Description of the security update for SQL Server 2016 Service Pack 1 GDR: August 8, 2017
KB4019089 - Description of the security update for SQL Server 2016 Service Pack 1 GDR: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acce...
Description of the security update for Outlook 2013: July 27, 2017
Description of the security update for Outlook 2013: July 27, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following Securit...
Description of the security update for Excel 2013: July 11, 2017
Description of the security update for Excel 2013: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows elevation of privilege vulnerability in Windows Server 2008: July 11, 2017 Summary An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully forward an authentication request to a Windows LDAP...
Description of the security update for Office 2010: July 11, 2017
Description of the security update for Office 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory.To learn more about the vulnerability, se...
Security update for the Windows kernel information disclosure vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows kernel information disclosure vulnerability in Windows Server 2008: July 11, 2017 Summary An information disclosure vulnerability exists when the HTTP.sys server application component improperly handles objects in memory. An attacker who successfully exploited this...
Security update for the Windows Explorer denial of service vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows Explorer denial of service vulnerability in Windows Server 2008: July 11, 2017 Summary An denial of service vulnerability exists when Windows Explorer attempts to open a non-existent file. An attacker who successfully exploited this vulnerability could cause a deni...
Security update for the MSINFO.exe information disclosure vulnerability in Windows Server 2008: July 11, 2017
Security update for the MSINFO.exe information disclosure vulnerability in Windows Server 2008: July 11, 2017 Summary An information disclosure vulnerability exists in the Windows System Information Console when it improperly parses XML input that contains a reference to an external entity. To...
Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017
Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017 Summary A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the...