5929 matches found
Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities
Summary IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID: CVE-2023-35887 DESCRIPTION: Apache MINA SSHD could allow a remote authenticated attacker to obtain sensitive information, caused by improper...
9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code execution
Cisco Talos has disclosed 17 vulnerabilities over the past two weeks, including nine that exist in a popular VPN software. Attackers could exploit these vulnerabilities in the SoftEther VPN solution for individual and enterprise users to force users to drop their connections or execute arbitrary...
WordPress WP Word Count Plugin <= 3.2.4 is vulnerable to Broken Access Control
Software WP Word Count Type Plugin Vulnerable versions = 3.2.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46628 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID becf99c528fe Credits Abdi Pranata Required privilege...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.13.3 security and bug fix update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.13.3 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS ba...
Hancom Office Resource Management Error Vulnerability
Hancom Office is a mobile office program from the Korean company Hancom. The program supports viewing and editing documents in multiple formats. A resource management error vulnerability exists in Hancom Office version 2020 HWord 11.0.0.7520, which stems from a security issue in the footer...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17482)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Office Spoofing Vulnerability (CNVD-2024-02719)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office has a spoofing vulnerability that can be exploited by attackers to conduct spoofing...
Microsoft Word Information Disclosure Vulnerability (CNVD-2025-17483)
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which can be exploited by attackers to obtain sensitive information...
The vulnerability of Microsoft Word’s text editor, related to errors in processing input data, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Word text editors, which allows attackers to disclose protected information
The vulnerability of Microsoft Word relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft Word 2016 Multiple Vulnerabilities (KB5002497)
This host is missing a critical security update according to Microsoft KB5002497 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Word 2013 Service Pack 1 Information Disclosure Vulnerability (KB5002483)
This host is missing an important security update according to Microsoft KB5002483 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Updates for Microsoft Word Products C2R Multiple Vulnerabilities (September 2023)
The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2023-36762 - An information disclosure vulnerability. CVE-2023-36761 Note that Nessus has not tested for these issues but has instea...
Patch Tuesday - September 2023
Microsoft is addressing 65 vulnerabilities this September Patch Tuesday, including two zero-day vulnerabilities, as well as four critical remote code execution RCE vulnerabilities, and six republished third-party vulnerabilities. Word: zero-day NTLM hash disclosure Microsoft Word receives a patch...
Adobe, Apple, Google & Microsoft Patch 0-Day Bugs
Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their own zero-day patching to do. On...
Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero-days
Microsoft disclosed 65 vulnerabilities across its suite of products and software Tuesday, only five of which are considered critical, which is very low compared to Microsofts usual security updates. However, there are two issues disclosed and patched this month that have already been exploited in...
CVE-2023-36762
Microsoft Word Remote Code Execution Vulnerability...
CVE-2023-36762
Microsoft Word Remote Code Execution Vulnerability...