1522 matches found
The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Component Object Model COM in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created application...
CVE-2020-1311
An elevation of privilege vulnerability exists when Component Object Model COM client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'...
CVE-2020-1311
An elevation of privilege vulnerability exists when Component Object Model COM client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'...
KLA11806 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions. Below is a complete list of...
CVE-2020-1311: Undefined Security Weakness
An elevation of privilege vulnerability exists when Component Object Model COM client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'...
Foxit PhantomPDF COM Object Mishandling Vulnerability
PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A COM object mishandling vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6 when using Microsoft Word. The vulnerability stems from the program not handling COM objects...
Fedora: Security Advisory for json-c (FEDORA-2020-847ad856ab)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: json-c-0.13.1-12.fc30
JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159...
CVE-2020-1066
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by...
CVE-2020-7809
ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...
PT-2020-3051
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework affected versions not specified Description The issue is related to insufficient access restrictions in the Microsoft .NET Framework, allowing a remote attacker to elevate their privileges. To exploit this, an attacker...
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 6.7.0.2, contains a Document Object Model DOM based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM...
Description of the security update for SharePoint Server 2019: April 14, 2020
None None...
MS15-081: Description of the security update for Word 2013: August 11, 2015
Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office...
VulnCheck KEV: CVE-2019-1405
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation...
Criminals hack Tupperware website with credit card skimmer
Update 2: A spokesperson for Tupperware has given a public statement to Alex Scroxton, Security Editor at ComputerWeekly. You can read it here. Update: Following our blog post, we continued to monitor the Tupperware website. As of 03/25 at 1:45 PM PT, we noticed that the malicious PNG file had be...
The vulnerability of the Windows COM Server component of the Windows operating system, which allows a perpetrator to increase their privileges
The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
CVE-2020-6845
An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack...
CVE-2019-19757
An internal product security audit of Lenovo XClarity Administrator LXCA discovered a Document Object Model DOM based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to be executed in the user's web browser if a specially crafted link is visited. The...