82 matches found
Microsoft SQL Server Reporting Services CVE-2019-1332 Cross Site Scripting Vulnerability
Description Microsoft SQL Server Reporting Services SSRS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
PT-2019-4537 · Microsoft · Sql Server Reporting Services +1
Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Reporting Services affected versions not specified Description: A cross-site scripting XSS issue exists due to improper sanitization of specially-crafted web requests. This could allow an attacker to run scripts in the...
PT-2018-11405 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.4 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. Successful exploitation could lead to sensitive information disclosure. The SSRF vulnerability can be...
December 12, 2017—KB4053579 (OS Build 14393.1944)
None None...
December 12, 2017—KB4054518 (Monthly Rollup)
None None...
December 12, 2017—KB4054519 (Monthly Rollup)
None None...
November 14, 2017—KB4048955 (OS Build 16299.64)
None None...
October 17, 2017—KB4043961 (OS Build 16299.19)
None None...
Syslog LogAnalyzer 3.6.5 - Stored XSS Exploit
Exploit for multiple platform in category web applications Vulnerability title: Syslog LogAnalyzer 3.6.5 Stored XSS Author: Dolev Farhi Contact: dolevf at yahoo dot com @dolevff Application: LogAnalyzer 3.6.5 Date: 8.2.2014 Relevant CVEs: CVE-2014-6070 Vulnerable version: alert"xss", and sending ...
Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...
PT-2009-4908 · Microsoft · Works +26
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6 SP1 Windows XP versions SP2 and SP3 Office XP version SP3 Office 2003 version SP3 2007 Microsoft Office System versions SP1 and SP2 Office Project 2002 version SP1 Visio 2002 version SP2 Office Word Viewe...
Important Update for SQL Server 2016 SP1 Reporting Services (KB3207512)
Important Update for SQL Server 2016 SP1 Reporting Services KB3207512...
KB3207512 - Important update for SQL Server 2016 SP1 Reporting Services
None None...
Security Update for SQL Server 2014 Service Pack 3 CU (KB4535288)
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...
Security Update for SQL Server 2016 Service Pack 2 GDR (KB4532097)
First Security Vulnerability fix: A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. Th...
Security Update for SQL Server 2016 Service Pack 2 CU (KB4535706)
First Security Vulnerability fix: A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. Th...
Security Update for SQL Server Reporting Services 2000 Service Pack 2 (KB983814)
A security issue has been identified in the SQL Server Reporting Services 2000 Service Pack 2 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...
Security Update for SQL Server 2014 Service Pack 3 GDR (KB4532095)
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...
Security Update for SQL Server 2012 Service Pack 4 CU (KB4532098)
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...