PT-2015-4907

Name of the Vulnerable Software and Affected Versions Dulwich versions prior to 0.9.9 Description The issue is related to a buffer overflow in the C implementation of the apply delta function in pack.c. This allows remote attackers to execute arbitrary code via a crafted pack file. Recommendation...

Debian Security Advisory DSA 3206-1 (dulwich - security update)

Multiple vulnerabilities have been discovered in Dulwich, a Python implementation of the file formats and protocols used by the Git version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-9706 It was discovered that Dulwich allows writi...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

Design/Logic Flaw

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-2107

CVE-2015-2107 affects HP Operations Manager i Management Pack for SAP (1.x) prior to 1.01. The vulnerability allows local users to execute OS commands by leveraging SAP administrative privileges. The available documents do not provide additional details on root cause specifics, affected versions ...

CVE-2015-0133

IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privileges via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-0133

CVE-2015-0133 affects IBM WebSphere Commerce 7.0 Feature Pack 4–8. The vulnerability is due to an XML External Entity (XXE) declaration combined with an entity reference, enabling remote attackers to read arbitrary files and potentially gain administrative privileges. Affected component is the XM...

HP Operations Manager i Management Pack for SAP Elevation of Privilege Vulnerability

HP Operations is a decentralized client/service software product for managing decentralized environments. A security vulnerability exists in HP Operations Manager i Management Pack for SAP that allows a local SAP administrative user to execute system commands on the system with elevated privilege...

Memory corruption

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP...

Microsoft SharePoint Services 3.0 Multiple Vulnerabilities (3038999)

This host is missing an important security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Excel Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-022: Description of the security update for SharePoint Enterprise Server 2013: March 10, 2015

None None...

SUSE-RU-2015:0611-1 Recommended update for SUSE Manager Server 2.1

This collective update for SUSE Manager Server 2.1 provides the following new features: Connect SUSE Manager to the SUSE Customer Center. Manage SLE12 systems. ISS: export/import information about cloned channels to support Service Pack migration on ISS slaves. FATE317789 New API calls:...

Siemens SIMATIC WinCC TIA Portal Man-in-the-Middle Information Disclosure Vulnerability

Siemens SIMATIC WinCC is the monitoring control and data acquisition SCADA and HMI system. An information disclosure vulnerability exists in Siemens SIMATIC WinCC V13 SP1, which can be exploited by an attacker to obtain sensitive information via a man-in-the-middle attack...

Microsoft Office Excel Viewer Remote Code Execution Vulnerability (3017347)

This host is missing an important security update according to Microsoft Bulletin MS14-083. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Graphics Component Information Disclosure Vulnerability (3029944)

This host is missing an important security update according to Microsoft Bulletin MS15-016. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...