105 matches found
PT-2024-4090
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a slab-use-after-free vulnerability in the msft do close function. This vulnerability is caused by a race condition where the msft-data is freed in hci release de...
Security Updates for Microsoft SharePoint Server 2016 (April 2024)
The Microsoft SharePoint Server 2016 installation on the remote host is missing a security update. It is, therefore, affected by a session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C Tenable, Inc...
CVE-2023-39326 affecting package msft-golang for versions less than 1.21.5-1
CVE-2023-39326 affecting package msft-golang for versions less than 1.21.5-1. A patched version of the package is available...
CVE-2024-24790 affecting package msft-golang for versions less than 1.21.6-1
CVE-2024-24790 affecting package msft-golang for versions less than 1.21.6-1. A patched version of the package is available...
CVE-2023-24531 affecting package msft-golang for versions less than 1.21.0-1
CVE-2023-24531 affecting package msft-golang for versions less than 1.21.0-1. A patched version of the package is available...
Security Updates for Microsoft Word Products (February 2024)
The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...
CVE-2024-20709
Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...
Input validation
Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...
Input validation
Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...
CVE-2024-20709
CVE-2024-20709 describes an Improper Input Validation in Acrobat Reader T5 (MSFT Edge) affecting versions
CVE-2024-20721
CVE-2024-20721 affects Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier. The root cause is improper input validation. In the described vulnerability, an unauthenticated attacker can cause an application DoS in the context of the current user, with exploitation requiring user inter...
CVE-2024-20721 T5 Acrobat JS vulnerability - Exploitable crash via t5::javascript::get_page_num_words
Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...
AZL-32103 CVE-2023-45285 affecting package msft-golang for versions less than 1.22.3-1.
Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module...
AZL-32123 CVE-2023-45287 affecting package msft-golang for versions less than 1.20.0-1
Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS1 padding may leak timing...
CVE-2023-45283 affecting package msft-golang for versions less than 1.20.11-1
CVE-2023-45283 affecting package msft-golang for versions less than 1.20.11-1. A patched version of the package is available...
CVE-2023-39319 affecting package msft-golang for versions less than 1.20.10-1
CVE-2023-39319 affecting package msft-golang for versions less than 1.20.10-1. A patched version of the package is available...
CVE-2023-29409 affecting package msft-golang for versions less than 1.20.7-1
CVE-2023-29409 affecting package msft-golang for versions less than 1.20.7-1. A patched version of the package is available...
CVE-2023-29405 affecting package msft-golang for versions less than 1.20.7-1
CVE-2023-29405 affecting package msft-golang for versions less than 1.20.7-1. A patched version of the package is available...