Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10966)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10976)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10975)

Microsoft Office is an office software suite of products developed by the American Microsoft Corporation Microsoft. Microsoft Office suffers from a memory corruption vulnerability due to the program failing to properly handle objects in memory. An attacker can exploit the vulnerability by means o...

Microsoft Windows Video Control Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Video Control is one of the video control components. A remote code execution vulnerability exists in Microsoft Windows Video Control that stems from the program failing to properly...

Microsoft Windows - DeviceApi CMApi PiCMOpenDeviceKey Arbitrary Registry Key Write Privilege Escalation (MS16-124)

Microsoft Windows - DeviceApi CMApi PiCMOpenDeviceKey Arbitrary Registry Key Write Privilege Escalation MS16-124 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=872 Windows: DeviceApi CMApi PiCMOpenClassKey Arbitrary Registry Key Write EoP Platform: Windows 10 10586 not tested...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-09364)

Microsoft Office is a Windows-based office software suite developed by Microsoft. Office if not properly handled RTF files in the implementation of Office RTF remote memory corruption vulnerability exists. This could allow an attacker to execute arbitrary code in the current user context...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09403)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript presentation when Edge handles memory objects. The vulnerability allows an attacker to corrupt memory, resulting in the execution of arbitrary code in the...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09401)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript presentation when Edge handles memory objects. The vulnerability allows an attacker to corrupt memory, resulting in the execution of arbitrary code in the...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09404)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript presentation when Edge handles memory objects. The vulnerability allows an attacker to corrupt memory, resulting in the execution of arbitrary code in the...

Open-Xchange AppSuite Local Code Execution Vulnerability

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A local code execution vulnerability exists in Open-Xchange AppSuite, which can be...

Microsoft SharePoint Server WAS Remote Code Execution Vulnerability (3141806)

This host is missing an important security update according to Microsoft Bulletin MS16-029. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-07583)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge. A remote attacker can exploit the vulnerability to run arbitrary code in the context of the current us...

Open-Xchange App Suite 7.8.2 Cross Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 46484 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.2 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.2-rev46, 7.6.3-rev1...

IBM UrbanCode Deploy Cross-Site Scripting Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

TikiWiki 15.1 ELFinder Unauthenticated File Upload

Description A file upload vulnerability in Tiki Wiki --Part83012510490351498898101-- 3. Info Author: Mehmet Ince https://www.exploit-db.com/exploits/40091/...

Microsoft Excel Arbitrary Code Execution Vulnerability (CNVD-2016-04960)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An arbitrary code execution vulnerability exists in Microsoft Office, which stems from the program's failu...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04928)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04789)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that stems from a program failing to properly access objects in memory. A remote attacker can exploit t...

Open-Xchange App Suite 7.8.1 Cross Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 45796 / 45811 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.1 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.2-rev44,...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for the execution of arbitrary code remotely exists in Internet Explorer due to incorrect access to objects in memory. This vulnerability can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...