CVE-2017-8727

CVE-2017-8727 is an RCE in the Windows Text Services Framework that can be triggered through memory handling in the Windows Text Services/IE edge scripting path. The connected KB entry confirms the flaw exists in Internet Explorer/Windows components and was addressed in Microsoft’s October 2017 p...

Windows Shell Memory Corruption Vulnerability (KB4042123)

This host is missing a critical security update according to Microsoft KB4042123 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Description of the security update for the Windows shell memory corruption vulnerability: October 10, 2017

None None...

The vulnerability of the Ultra Services Framework Element Manager’s network management tool, related to errors in managing registration data, allows a perpetrator to gain access to the system with superuser privileges.

The vulnerability of the Ultra Services Framework Element Manager network management tool is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system with superuser privileges...

Cisco Ultra Services Framework Staging Server Security Bypass Vulnerability

Cisco Ultra Services Framework Staging Server is a segmentation server in an intelligent online service delivery platform from the U.S. company Cisco Cisco. A security vulnerability exists in Cisco Ultra Services Framework Staging Server. A remote attacker could exploit the vulnerability to log i...

Information disclosure

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to...

CVE-2017-6771

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to...

CVE-2017-6771

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to...

CVE-2017-6771

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to...

CVE-2017-6771

The CVE-2017-6771 vulnerability affects the Cisco Ultra Services Framework AutoVNF automation tool, where an unauthenticated, remote attacker can view sensitive configuration data by browsing to a specific URL. Root cause: inadequate protection of sensitive data within AutoVNF. Impact: informatio...

Cisco Ultra Services Framework AutoVNF Configuration Information Disclosure Vulnerability

A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to...

Cisco Ultra Services Framework Information Disclosure Vulnerability

Cisco Ultra Services Framework is an intelligent online service delivery platform from the U.S. company Cisco Cisco. An information disclosure vulnerability exists in the AutoVNF VNFStagingView class in Cisco Ultra Services Framework version 21.0.0, which stems from the program failing to...

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Cisco Ultra Services Framework Unauthorized Access Vulnerability

Cisco Ultra Services Framework is an intelligent online service delivery platform from Cisco.Ultra Automation Service is one of the automation services. A security vulnerability exists in Cisco Ultra Services Framework for UAS versions prior to 5.0.3 and prior to 5.1. A remote attacker could...

Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability

Cisco Ultra is the virtual, mobile services platform. A security vulnerability in the AutoIT service of the Cisco Ultra Services Framework Staging Server can be exploited by an unauthenticated, remote attacker to execute arbitrary shell commands as a Linux root user due to a failure to properly...

Cisco Ultra Services Framework AutoVNF User Credential Information Disclosure Vulnerability

Cisco Ultra Services Framework is an intelligent online service delivery platform from Cisco.AutoVNF tool is one of the virtualized network tools. An information disclosure vulnerability exists in the AutoVNF tool in Cisco Ultra Services Framework versions prior to 5.0.3 and versions prior to 5.1...

Cisco Ultra Services Framework Information Disclosure Vulnerability

Cisco Ultra Services Framework is the United States Cisco Cisco a smart online services payment platform. An information disclosure vulnerability exists in the symboliclink symlink creation function of the AutoVNF tool in the Cisco Ultra Services Framework, which arises from the program failing t...

CVE-2017-6714

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability b...

CVE-2017-6708

A vulnerability in the symbolic link symlink creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of...