Microsoft Windows Journal Memory Corruption Vulnerability

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in the handling of constructed Journal files in Microsoft Windows, which can be successfully exploited to allow an attacker to execute arbitrary code in the current user context...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-01005)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office software, which stems from the program...

IBM WebSphere Commerce Cross-Site Request Forgery Vulnerability

IBM WebSphere Commerce is = a suite of e-commerce solutions. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. A cross-site request forgery vulnerability exists in IBM WebSphere Commerce that allows remote attackers to...

Microsoft Office PowerPoint Remote Code Execution Vulnerability (3124585)

This host is missing an important security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08061)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists when Microsoft IE versions 8 through 11 do not properly access objects in memory. An attack...

Microsoft Browser Memory Corruption Vulnerability (CNVD-2015-08112)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08070)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists when Microsoft IE versions 9 through 11 fail to properly access objects in memory. This...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08062)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists when Microsoft IE version 10 fails to properly access objects in memory. Allows an attacker...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08065)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists when Microsoft IE versions 8 and 9 fail to properly access objects in memory. Allows an...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-08014)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program failing to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-08011)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program failing to...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (3116111)

This host is missing an important security update according to Microsoft Bulletin MS15-131. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2015-07745)

Moodle is a free, open source e-learning software platform. Moodle suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Open-Xchange Guard 2.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Open-Xchange Guard Vendor: Open-Xchange GmbH Internal reference: 41466 Bug ID Vulnerability type: Cross-Site-Scripting CWE-80 Vulnerable version: 2.0 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-07509)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists when Microsoft IE versions 10 and 11 fail to properly access objects in memory. An...

Microsoft Internet Explorer CVE-2015-6087 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

AlienVault OSSIM Cross-Site Request Forgery Vulnerability

AlienVault OSSIM is an open source security information management system. AlienVault OSSIM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...

Microsoft Office Web Apps Cross-Site Scripting Vulnerability

Microsoft Office Web Apps Server is an Office Server product from the U.S. company Microsoft Microsoft that provides browser-based file viewing and editing capabilities for Office documents. A cross-site scripting vulnerability exists in Microsoft Office Web Apps Server. An attacker could exploit...

Microsoft Windows Point of Entry Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to run arbitrary code in the security context of a user running a compromised...

McAfee Vulnerability Manager 'Organizations' Cross-Site Request Forgery Vulnerability

McAfee Vulnerability Manager is a vulnerability management application. A cross-site request forgery vulnerability exists on the McAfee Vulnerability Manager 'Organizations' page, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user context...