CVE-2016-7289

Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7289

CVE-2016-7289 corresponds to a memory corruption/remote code execution vulnerability in Microsoft Office components, notably Microsoft Publisher 2010 SP2. The issue arises from improper handling of objects in memory when parsing crafted documents, allowing an attacker to run arbitrary code or cau...

CVE-2016-7289

Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

Podlove Podcast Publisher <= 2.3.15 - Multiple SQLi & XSS

The Podlove Podcast Publisher WordPress plugin was affected by a Multiple SQLi & XSS security vulnerability...

MS16-148: Description of the security update for Publisher 2010: December 13, 2016

MS16-148: Description of the security update for Publisher 2010: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Microsoft Office CVE-2016-7289 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Oracle BI Publisher Detection (HTTP)

HTTP based detection of Oracle BI Publisher. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle BI Publisher XML External Entity Injection Vulnerability (cpuoct2016)

Oracle BI Publisher is prone to a XML external entity XXE injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3473

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-3473

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-3473

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-3473

CVE-2016-3473 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware and is tied to versions 11.1.1.7.x, 11.1.1.9.x, and 12.2.1.0.x. The vulnerability is described as an unspecified vulnerability in the BI Publisher component that allows remote authenticated users to affect c...

CVE-2016-3473

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection

Oracle BI Publisher 11.1.1.6.011.1.1.7.011.1.1.9.012.2.1.0.0 - XML External Entity Injection Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage:...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Component (CNVD-2016-10064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. BI Publisher formerly known as XML Publisher is one of the reporting components. A remote securit...

Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection

Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage: https://www.oracle.com/ Version: 11.1.1.6.0, 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0 Info: Previous...

CVE-2016-6273

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...

CVE-2016-6273

The lmadmin component in Flexera FlexNet Publisher aka Flex License Manager before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service crash via a type 2...