10870 matches found
CVE-2017-5170
An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element DLL Hijacking vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the...
CVE-2017-5170
Summary: CVE-2017-5170 affects Moxa SoftNVR-IA Live Viewer (Version 3.30.3122 and earlier). It stems from an Uncontrolled Search Path Element (DLL Hijacking) vulnerability where a malicious DLL could be loaded if placed in the application’s default install location, allowing code execution at the...
emouseatlas.org XSS vulnerability
Open Bug Bounty ID: OBB-531051 Description| Value ---|--- Affected Website:| emouseatlas.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-2654
Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Company Dir / Org Chart Viewer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
The vulnerabilities of Microsoft Excel editors, Microsoft Excel Viewer for electronic spreadsheet viewing, and the Microsoft Office Compatibility Pack are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Excel editors, Microsoft Excel Viewer, and the Microsoft Office Compatibility Pack is related to improper handling of objects in memory. Exploitation of this vulnerability may allow a malicious actor to execute arbitrary code in the context of the current user...
comm.sba.seoul.kr XSS vulnerability
Open Bug Bounty ID: OBB-527964 Description| Value ---|--- Affected Website:| comm.sba.seoul.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
[SECURITY] Fedora 26 Update: mupdf-1.12.0-1.fc26
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
CVE-2017-18014
An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page Control Center - Log Viewer - in the filter option "Web Server Protection" in the webadmin...
Cross site scripting
An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3. An unauthenticated user can trigger a persistent XSS vulnerability found in the WAF log page Control Center - Log Viewer - in the filter option "Web Server Protection" in the webadmin...
Blender Directory Browsing Thumbnail Viewer Integer Overflow Vulnerability
Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender Directory...
Samsung SRN-1670D Web Viewer 1.0.0.193 Arbitrary File Read / Upload
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'digest' class MetasploitModule 'Samsung SRN-1670D Web Viewer Version 1.0.0.193 Arbitrary File Read and Upload', 'Description' = %q This module exploits an...
[SECURITY] Fedora 27 Update: mupdf-1.12.0-1.fc27
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
Memory Corruption Vulnerability in 2345 Viewer V9.0
2345 Viewer is one of the fastest and most format-compatible high-definition image viewing software. A memory corruption vulnerability exists in 2345 Viewer V9.0 when parsing the BMP file format, which allows an attacker to construct a malicious BMP image file to trigger a memory corruption,...
Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011606)
This host is missing an important security update according to Microsoft KB4011606 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office Word Viewer Memory Corruption Vulnerability (KB4011641)
This host is missing an important security update according to Microsoft KB4011641 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Description of the security update for Word Viewer: January 9, 2018
None None...
Microsoft Word CVE-2018-0797 Memory Corruption Vulnerability
Description Microsoft Word is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Offic...
PDF-XChange Viewer 'launchURL' Function Arbitrary Code Execution Vulnerability
PDF-XChange Viewer is a free multifunctional PDF reader. An arbitrary code execution vulnerability exists in the 'launchURL' function in PDF-XChange Viewer version 2.5 Build 314.0. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a specially crafted PDF...