Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2018-23153)

Microsoft Outlook is one of the components of the Microsoft Office software suite, which expands on the functionality of Outlook express that comes with Windows.Outlook has many features that can be used to send and receive e-mail, manage contact information, keep a diary, organize schedules, and...

Microsoft Word 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4461485)

This host is missing an important security update according to Microsoft KB4461485. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB3114565)

This host is missing an important security update according to Microsoft KB3114565 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Word 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4461526)

This host is missing an important security update according to Microsoft KB4461526. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23213)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft ChakraCore Scripting Engine CVE-2018-8556 Remote Memory Corruption Vulnerability

Description Microsoft ChakraCore is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore...

Microsoft ChakraCore Scripting Engine CVE-2018-8557 Remote Memory Corruption Vulnerability

Description Microsoft ChakraCore is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore...

Microsoft ChakraCore Scripting Engine CVE-2018-8541 Remote Memory Corruption Vulnerability

Description Microsoft ChakraCore is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

The vulnerability of Microsoft Word text editors allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2019-00635)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Excel due to the software's failure to properly handle objects in Protected View. A remote attacker could exploit the...

Unspecified Vulnerability in IBM WebSphere Portal (CNVD-2018-24843)

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects an organization internally and externally, allowing employees, customers and suppliers to access internal data through the platform. A security vulnerability exists in IBM WebSphe...

CVE-2018-1672

IBM WebSphere Portal 7.0–9.0 is affected by a security bypass vulnerability where the application may fail to set the correct user context in impersonation scenarios. An authenticated, remote attacker could exploit this to perform actions in the user or administrator interface with the privileges...

CVE-2018-1672

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958...

CVE-2018-1672

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958...

CVE-2018-1672

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958...

Code injection

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958...

PT-2018-13700

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0 through 9.0 Description The issue arises from the software's failure to set the correct user context in certain impersonation scenarios, allowing a user to act with the identity of a different user...

The vulnerability of the Internet Explorer browser, caused by errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...