CVE-2016-0470

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Publisher Security...

CVE-2016-0614

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-0401

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429...

CVE-2016-0429

Oracle Fusion Middleware Oracle BI Publisher Scheduler component (11.1.1.7.0 and 11.1.1.9.0) has an unspecified vulnerability in the Scheduler subcomponent that could allow remote attackers to compromise integrity (CVE-2016-0429). The connected Nessus entry also references CVE-2016-0401 and other...

CVE-2016-0614

CVE-2016-0614 affects Oracle Fusion Middleware’s Oracle BI Publisher component (versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0). The vulnerability is described as unspecified and allows remote authenticated users to affect confidentiality via unknown vectors; CVSS analysis (NVD) indicates a Network ...

CVE-2016-0470: Undefined Security Weakness

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Publisher Security...

CVE-2016-0614: Undefined Security Weakness

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors...

PT-2016-4233

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0 through 11.1.1.9.0 Oracle Fusion Middleware version 12.2.1.0.0 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors...

CVE-2016-0429: Undefined Security Weakness

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0401...

PT-2016-4202

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0 through 11.1.1.9.0 Description The issue affects the integrity of the system, related to the Scheduler component in the Oracle BI Publisher. The exact nature of the vulnerability and the vectors use...

PT-2016-4186

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0 through 11.1.1.9.0 Description The issue affects the integrity of the system, related to the Scheduler component in the Oracle BI Publisher. The exact nature of the vulnerability and the vectors use...

CVE-2016-0401: Undefined Security Weakness

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote attackers to affect integrity via unknown vectors related to Scheduler, a different vulnerability than CVE-2016-0429...

Vulnerabilities of Microsoft Word, the publishing software; Microsoft Publisher; Microsoft Excel, the spreadsheet software; Microsoft PowerPoint, the presentation software; Skype for Business and Microsoft Lync, instant messaging software; Microsoft Project, project management software; Microsoft InfoPath, XML-based form development software; Microsoft OneNote, note-taking software; Microsoft Access, database management system that allows attackers to bypass security measures and gain elevated privileges.

The vulnerabilities of Microsoft Word, the publishing software Microsoft Publisher, the spreadsheet software Microsoft Excel, the presentation preparation software Microsoft PowerPoint, the instant messaging software Skype for Business and Microsoft Lync, the project management software Microsoft...

ClipperCMS 1.3.0 - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to...

ClipperCMS 1.3.0 - Multiple SQL Injections

ClipperCMS 1.3.0 - Multiple SQL Injections Security Advisory - Curesec Research Team 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to...

Microsoft Publisher Privilege Elevation Vulnerability (3104540)

This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office CVE-2015-2503 Privilege Escalation Vulnerability

Description Microsoft Office is prone to a privilege-escalation vulnerability. An attacker can leverage this issue to execute arbitrary code with elevated privileges in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions...

MS15-116: Security Update for Microsoft Office to Address Remote Code Execution (3104540)

The remote Windows host has a version of Microsoft Office, Access, Excel, InfoPath, OneNote, PowerPoint, Project, Publisher, Visio, Word, Excel Viewer, Word Viewer, SharePoint Server, Office Compatibility Pack, Office Web Apps, Skype for Business, or Lync installed that is affected by multiple...

MS15-116: Description of the security update for Publisher 2016: November 10, 2015

None None...

ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS

The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...