128 matches found
CVE-2021-36296
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...
CVE-2021-36295
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...
Download Monitor < 4.4.7 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape the postid and downloadablefileversion parameters, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks...
KB5003364: Servicing stack update for Windows 10, version 1803: May 11, 2021
None None...
KB5001402: Servicing stack update for Windows 10, version 1607: April 13, 2021
None None...
Description of the security update for Office 2010: March 9, 2021 (KB4493214)
Description of the security update for Office 2010: March 9, 2021 KB4493214 Summary This security update resolves a Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...
CVE-2020-36252
CVE-2020-36252 affects OwnCloud Server 10.x prior to 10.3.1. An attacker who has one outgoing share from a victim can access any version of any file by requesting a predictable ID number, exploiting a privilege/access-control flaw. The vulnerability impacts confidentiality (high) and is classifie...
Owncloud 权限许可和访问控制问题漏洞
OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. A privilege permission and access control issue vulnerability exists in OwnCloud Server, which can be exploited by an attacker to access any version of any file by sending a request with a...
Microsoft Windows DrawIconEx Local Privilege Escalation Exploit
This Metasploit module exploits CVE-2020-1054, an out of bounds write reachable from DrawIconEx within win32k. The out of bounds write can be used to overwrite the pvbits of a SURFOBJ. By utilizing this vulnerability to execute controlled writes to kernel memory, an attacker can gain arbitrary co...
Description of the security update for Microsoft Visual Studio 2013 Update 5: September 8, 2020
None None...
Description of the security update for Office 2016: September 8, 2020
None None...
Servicing stack update for Windows 10, version 2004: September 8, 2020
None None...
Servicing stack update for Windows 10, version 1809: July 14, 2020
None None...
Servicing stack update for Windows 10: June 9, 2020
None None...
Servicing stack update for Windows 10, version 1709: June 9, 2020
None None...
Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...
Description of the security update for Office 2010: April 14, 2020
Description of the security update for Office 2010: April 14, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: April 14, 2020
Description of the security update for Office 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...
Servicing stack update for Windows 10, version 1809: April 14, 2020
None None...
Description of the security update for Word 2010: March 10, 2020
Description of the security update for Word 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...