206 matches found
dovecot: Buffer overflow in indexer-worker process results in privilege escalation
In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components...
CVE-2019-2777
Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM subcomponent: Search. Supported versions that are affected are 19.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Server...
UBUNTU-CVE-2019-9826
The fulltext search component in phpBB before 3.2.6 allows Denial of Service...
The vulnerability of the PIA Search component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected data.
The vulnerability of the PIA Search component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HT...
February 13, 2018—KB4074587 (Security-only update)
None None...
Microsoft Windows Multiple Vulnerabilities (KB4048957)
This host is missing a critical security update according to Microsoft KB4048957 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
November 14, 2017—KB4048962 (Security-only update)
None None...
November 14, 2017—KB4048961 (Security-only update)
None None...
November 14, 2017—KB4048959 (Monthly Rollup)
None None...
November 14, 2017—KB4048960 (Security-only update)
None None...
Microsoft Windows Search Information Disclosure (CVE-2017-11772)
An information disclosure exists in the Search component of Microsoft Windows. The vulnerability is due to how Windows Search handles objects in memory. A remote attacker can exploit this vulnerability by sending specially crafted messages to the Windows Search service...
Code injection
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: Search. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network...
October 10, 2017—KB4041678 (Security-only update)
None None...
CVE-2017-11772
CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...
CVE-2017-11771
CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...
CVE-2017-11771
The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properl...
CVE-2017-10049
Vulnerability in the Siebel Core CRM component of Oracle Siebel CRM subcomponent: Search. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Core CRM. Successful attacks require...
August 8, 2017—KB4034672 (Security-only update)
None None...