MS15-069: Description of the security update for Windows: July 14, 2015

None None...

MS15-074: Vulnerability in Windows Installer service could allow elevation of privilege: July 14, 2015

None None...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2015:1174-1)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix various bugs and security issues. The following vulnerabilities have been fixed : CVE-2015-3636: A missing sknullsnodeinit in pingunhash inside the ipv4 stack can cause crashes if a disconnect is followed by another connect...

IBM Domino Web Server Cross-site Scripting Vulnerability (CVE-2015-1981)

Hello 3APA3A! Earlier I wrote about XSS vulnerability in IBM Domino http://seclists.org/fulldisclosure/2015/May/128. I informed IBM in May about it and at 17.06.2015 they fixed it and released security bulletin. Security Bulletin: IBM Domino Web Server Cross-site Scripting Vulnerability...

Samsung Galaxy S Mobile Phone Remote Code Execution Vulnerability

Samsung Galaxy is a series of mid-range and high-end smartphones from Samsung.Swiftkey keyboard is a keyboard application that comes pre-installed with system privileges on Galaxy S series phones. Samsung Galaxy S4 Mini, S4, S5, S6 series smartphones fail to validate Swiftkey language pack...

Code injection

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

Samsung mobile remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Summary A remote attacker to completely have the ability to control user web traffic, the manipulation Samsung phone keyboard update mechanism, and on the target phone using the system user permission to execute code. On Samsung devices pre-installed quick keyboard cannot be disabled also cannot ...

Samsung Galaxy S phones fail to properly validate SwiftKey language pack updates

Overview Samsung Galaxy S phones, including the S4 Mini, S4, S5, and S6, fail to properly validate Swiftkey language pack updates. Description CWE-345: Insufficient Verification of Data Authenticity - CVE-2015-4640Samsung Galaxy S phones, including the S4 Mini, S4, S5, and S6, are pre-installed...

RealTimes (Realplayer) 18.0.1.6 Privilege Escalation

RealTimes Realplayer Desktop Service Trusted Path Privilege Escalation Affected Version: 18.0.1.6 or below Vendor Homepage: http://www.real.com/?ref=cloud Vulnerability discovered by Jay Turla @shipcod3 Tested on Windows 7 Service Pack 1 Reference:...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759

CVE-2015-1759 is a memory-corruption remote code execution vulnerability in Microsoft Office, specifically in the Office Compatibility Pack SP3, caused by improper handling of in-memory objects during parsing of crafted Office files. The flaw can allow an attacker to execute arbitrary code on a v...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Microsoft Windows Media Player Remote Code Execution Vulnerability (3033890)

This host is missing a critical security update according to Microsoft Bulletin MS15-057. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DLA-231-1 dulwich - security update

Bulletin has no description...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Privilege Escalation

This plugin is prone to an unspecified privilege escalation vulnerability. Solution Update the plugin...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via aioseopfunctions.php newmeta parameter. Solution Update the plugin...

Microsoft SharePoint Server RCE Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint Server and Foundation Remote Code Execution Vulnerability (3058083)

This host is missing an important security update according to Microsoft Bulletin MS15-047. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Suite Remote Code Execution Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...