Microsoft Excel 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3191894)

This host is missing an important security update according to Microsoft KB3191894 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB3213537)

This host is missing an important security update according to Microsoft KB3213537. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Security update for the Windows Performance Monitor information disclosure vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows Performance Monitor information disclosure vulnerability in Windows Server 2008: July 11, 2017 Summary An information disclosure vulnerability exists in the Windows Performance Monitor Console when it improperly parses XML input containing a reference to an externa...

Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017 Summary A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: July 11, 2017

None None...

Security update for the Windows Explorer remote code execution vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows Explorer remote code execution vulnerability in Windows Server 2008: July 11, 2017 Summary A remote code execution vulnerability exists when Windows Explorer improperly handles executable files and shares during rename operations. An attacker who successfully...

Description of the security update for SharePoint Server 2010: July 11, 2017

Description of the security update for SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Security update for Windows Server 2008: July 11, 2017

Security update for Windows Server 2008: July 11, 2017 Summary This security update resolves vulnerabilities in Windows Server 2008 that could allow elevation of privilege or information disclosure. To learn more about the vulnerabilities, go to the Security Update Guide. More Information Importa...

Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017

Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

Security Update for Microsoft Office Products (July 2017)

The Microsoft Office application, Microsoft Office Compatibility Pack, or Microsoft Excel Viewer installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An...

Elasticsearch X-Pack Security Information Disclosure Vulnerability (CNVD-2017-14900)

Elasticsearch X-Pack is an extension of Elastic Stack log analysis system from the Dutch company Elasticsearch.Security is one of the features used to control access rights. A security vulnerability exists in Elasticsearch X-Pack Security versions 5.0.0 through 5.4.3. An attacker can exploit this...

Authentication flaw

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...

CVE-2017-8442

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...

CVE-2017-8442

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...

CVE-2017-8442

CVE-2017-8442 affects Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3. When enabled, the Elasticsearch _nodes API can leak sensitive configuration information, including paths and passphrases of SSL keys used by an authentication realm, potentially exposing credentials to an authenticated u...

CVE-2017-8442

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...

Elastic Stack 5.5 Security update

Elasticsearch X-Pack Security user credentials disclosure ESA-2017-10 Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as...

Elasticsearch Kibana X-Pack Security Information Disclosure Vulnerability

Elasticsearch Kibana X-Pack security formerly known as elasticsearch-dashboard is a security version of a set of open source, browser-based analytics and search tools for Elasticsearch dashboards from the Dutch company Elasticsearch. A security vulnerability exists in Elasticsearch Kibana X-Pack...

CVE-2017-8443

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Design/Logic Flaw

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...