Lucene search
+L

3028 matches found

NVD
NVD
added 2018/06/14 12:29 p.m.26 views

CVE-2018-8245

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher...

7.8CVSS6.6AI score0.15416EPSS
SaveExploits0References3
Prion
Prion
added 2018/06/14 12:29 p.m.22 views

Remote code execution

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher...

6.8CVSS6.8AI score0.15416EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2018/06/14 12:0 p.m.78 views

CVE-2018-8245

CVE-2018-8245 (Microsoft Publisher RCE) is a remote code execution flaw in Microsoft Publisher caused by failure to lock down the Local Machine zone when instantiating OLE objects. Affected product: Publisher (Publisher 2010 SP2 noted in related materials). The root cause is improper handling of ...

7.8CVSS6.7AI score0.15416EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/06/14 12:0 p.m.34 views

CVE-2018-8245

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher...

6.8AI score0.15416EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/06/13 12:0 a.m.25 views

Microsoft Publisher Elevation of Privilege Vulnerability

Microsoft Publisher 2010 SP2 is a desktop publishing software from the Office suite of Microsoft USA that can be used to create press releases, postcards, and more. An elevation of privilege vulnerability exists in Microsoft Publisher 2010 SP2 that stems from the program failing to take advantage...

7.8CVSS6.6AI score0.15416EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/06/13 12:0 a.m.65 views

Microsoft Publisher 2010 Service Pack 2 Privilege Elevation Vulnerability (KB4011186)

This host is missing an important security update according to Microsoft KB4011186 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.8CVSS6.3AI score0.15416EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2018/06/12 7:0 a.m.37 views

Microsoft Publisher Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects. An attacker who successfully exploited the vulnerability could force arbitrary code to be executed in the Local Machine zone. To...

7.8CVSS3.3AI score0.15416EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/06/12 7:0 a.m.36 views

Description of the security update for Publisher 2010: June 12, 2018

Description of the security update for Publisher 2010: June 12, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

7.8CVSS7AI score0.15416EPSS
SaveExploits0
Symantec
Symantec
added 2018/06/12 12:0 a.m.49 views

Microsoft Office CVE-2018-8245 Privilege Escalation Vulnerability

Description Microsoft Office is prone to a privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Publisher 2010 Service Pack 2 32-bit editions Microsoft Publisher 2010 Service Pack 2 64-bit editions Recommendations Run...

0.8AI score0.15416EPSS
SaveExploits0References1Affected Software1
Kaspersky
Kaspersky
added 2018/06/12 12:0 a.m.312 views

KLA11267 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An incorrect handling of requests in Microsoft...

9.3CVSS7.5AI score0.20088EPSS
SaveExploits0References37
Tenable Nessus
Tenable Nessus
added 2018/06/12 12:0 a.m.441 views

Security Updates for Microsoft Publisher Products (June 2018)

The Microsoft Publisher Products are missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects. An...

7.8CVSS6.8AI score0.15416EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/06/07 12:0 a.m.6 views

Flexera Software FlexNet Publisher Licensing Service Arbitrary Code Execution Vulnerability

Flexera Software FlexNet Publisher formerly known as FLEXlm is the software license management core component of the Entitlement Relationship Management Solution from Flexera Software. FlexNet Publisher Licensing Service is a software license activation verification service. A security...

7.8CVSS8.2AI score0.00402EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/10 12:0 a.m.8 views

CloudBees Jenkins HTML Publisher Plugin Path Traversal Vulnerability

CloudBees Jenkins is the U.S. CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . HTML Publisher Plugin is used in one of the plug-ins used to...

6.5CVSS6.8AI score0.02714EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/10 12:0 a.m.9 views

CloudBees Jenkins Email Extension Plugin Information Disclosure Vulnerability (CNVD-2018-11045)

CloudBees Jenkins is a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Email Extension Plugin is used in one of the email plugin . CloudBees...

6.5CVSS6.4AI score0.00988EPSS
SaveExploits0References1
NVD
NVD
added 2018/05/08 3:29 p.m.22 views

CVE-2018-1000175

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...

6.5CVSS6.4AI score0.02714EPSS
SaveExploits0References1
Prion
Prion
added 2018/05/08 3:29 p.m.18 views

Path traversal

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...

4CVSS6.4AI score0.02714EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/05/08 3:29 p.m.12 views

CVE-2018-1000175

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...

6.5CVSS6.6AI score
SaveExploits0References1
CVE
CVE
added 2018/05/08 3:0 p.m.73 views

CVE-2018-1000175

Jenkins HTML Publisher Plugin

6.5CVSS6.3AI score0.02714EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/08 3:0 p.m.29 views

CVE-2018-1000175

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...

6.4AI score0.02714EPSS
SaveExploits0References1
NVD
NVD
added 2018/03/13 1:29 p.m.23 views

CVE-2018-1000109

An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs...

4.3CVSS4.4AI score0.00676EPSS
SaveExploits0References1
Rows per page
Query Builder