1705 matches found
CVE-2016-4045
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of the user. Malicious script code can be executed...
Open redirect
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a user clicks the corresponding link at the RSS reader of App Suite, code gets executed at the context of the user. Malicious script code can be executed...
Open redirect
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. When adding those contacts to a group, the script code gets executed in the context of the user which creates or changes the group by using autocomplete. In most cases this is a...
Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-12452)
Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that stems from the program failing to properly handle objects in memory. An attacker can exploit the...
Microsoft Office Memory Corruption Vulnerability (CNVD-2016-12454)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. Microsoft Office suffers from a memory corruption vulnerability due to the program's failure to properly...
Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12356)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...
Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12355)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...
Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12393)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...
Adobe Flash Player Buffer Overflow Vulnerability (CNVD-2016-12389)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A buffer overflow vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to execute arbitrary code in the user context of an affected application. A failed explo...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12382)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12380)
Adobe Flash Player is a widely used proprietary multimedia program developed by Adobe. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code in the user context of an affected application. A failed exploit attempt may result in a...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-12381)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...
Adobe indesign Memory Corruption Vulnerability
Adobe indesign is an American Adobe company launched a set in the field of professional typography design software. A memory corruption vulnerability exists in Adobe indesign, which can be exploited by an attacker to execute arbitrary code in the context of a user running the affected application...
Adobe Flash Player Code Execution Vulnerability (CNVD-2016-12359)
Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A code execution vulnerability exists in Adobe Flash Player that could allow an attacker to execute arbitrary code within the user context of an affected application. A failed exploit...
Microsoft Office CVE-2016-7298 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Memory Corruption Vulnerability in Multiple VMware Products
VMware Workstation and VMware Workstation Player are both virtual machine software products from VMware, VMware Workstation Pro is a professional version; VMware Workstation Player is a free and open source virtual machine software program with simpler features; Vmware Fusion is a virtual machine...
Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10971)
Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...
Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10970)
Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...
Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10967)
Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...
Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10968)
Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...