Microsoft Windows WebDAV CVE-2016-0051 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Windows 10 for...

Ruby on Rails Action Pack Denial of Service Vulnerability

Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability in Ruby on Rails Action Pack allows remote attackers to conduct deni...

Ruby on Rails Action Pack Information Disclosure Vulnerability

Ruby on Rails is the Rails core team to develop and maintain a set of open source Ruby-based Web application framework . Action Pack is one of the components used to build and test MVC Web applications . A security vulnerability exists in Ruby on Rails Action Pack that can be exploited by remote...

Ruby on Rails: Remote code execution using render :inline

Possible remote code execution vulnerability in Action Pack. There is a possible remote code execution vulnerability in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2016-2098. Versions Affected: 3.2.x, 4.0.x, 4.1.x, 4.2.x Not affected: 5.0+ Fixed Versions: 3.2.22.2,...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for viewing electronic spreadsheets, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using...

The vulnerability of the Microsoft Office package, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor allow a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office package, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted email messag...

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, is caused by buffer overflow. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially...

The vulnerability of the Microsoft Office package, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor allow a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office package, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for viewing electronic spreadsheets, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using...

Possible Object Leak and Denial of Service attack in Action Pack

There is a possible object leak which can lead to a denial of service vulnerability in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2016-0751. Versions Affected: All. Not affected: None. Fixed Versions: 5.0.0.beta1.1, 4.2.5.1, 4.1.14.1, 3.2.22.1 Impact ------ A careful...

Object leak vulnerability for wildcard controller routes in Action Pack

There is an object leak vulnerability for wildcard controllers in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2015-7581. Versions Affected: = 4.0.0 and 5.0.0.beta1 Not affected: 4.0.0, 5.0.0.beta1 and newer Fixed Versions: 4.2.5.1, 4.1.14.1 Impact ------ Users that ha...

Unspecified Vulnerability in Oracle E-Business Suite Application Mgmt Pack for E-Business Suite REST Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Application Mgmt Pack for E-Business Suite REST component, which allows remote attackers to exploit the vulnerability by submitting special...

Unspecified Vulnerability in Oracle E-Business Suite Application Mgmt Pack for E-Business Suite REST Component (CNVD-2016-00595)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Application Mgmt Pack for E-Business Suite REST component, which allows remote attackers to exploit the vulnerability to submit special requests...

CVE-2016-0457

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is...

CVE-2016-0456

Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is...

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Office Compatibility Pack, a compatibility suite, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Excel Viewer, a component of the Microsoft Office Compatibility Pack, and the Microsoft Excel spreadsheet editor is due to buffer overflow. Exploitation of this vulnerability could allow an attacker to execute arbitrary code using a specially crafted Office...

CVE-2016-0030

Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."...

Immunity Canvas: MS16_006_SILVERLIGHT

Name| ms16006silverlight ---|--- CVE| CVE-2016-0034 Exploit Pack| CANVAS Description| ms16006silverlight Notes| CVE Name: CVE-2016-0034 VENDOR: Microsoft Notes: This module exploits a mishandling of negative offsets during a decoding. This situation could be exploited to overwrite with controlled...

Microsoft Office PowerPoint Remote Code Execution Vulnerability (3124585)

This host is missing an important security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3124585)

This host is missing a critical security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...