5925 matches found
Remote code execution
Microsoft Word Remote Code Execution Vulnerability...
Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
By Jon Munshaw and Vanja Svajcer. Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol. October's security update features 11 critical...
Microsoft Word Remote Code Execution Vulnerability
...
KLA20002 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint...
PT-2022-5964 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office and Microsoft 365 Apps for Enterprise packages. This can allow an attacker to execute arbitrary code...
Microsoft Office 安全漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office Word. The following products and editions...
Microsoft Word 安全漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2022-41031 Microsoft Word Remote Code Execution Vulnerability
...
PT-2022-5316 · Microsoft · Office
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft Office, specifically concerning memory usage after it has been freed. This can allow an attacker to execute...
CVE-2022-41031
CVE-2022-41031 is a Microsoft Word remote code execution vulnerability. Affected product: Microsoft Word (Office). Underlying issue: unspecified in the provided documents beyond Word involvement; CVSSv3.1 shows 7.8 base score with AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access with ...
WordPress WP Word Count plugin <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by lucy in the WordPress WP Word Count plugin versions = 3.2.3. Solution Deactivate and delete. This plugin has been closed as of October 6, 2022 and is not available for download. This closure is temporary, pending a full...
CVE-2022-36383
Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Word Search Puzzles game plugin = 2.0.1 at WordPress...
CVE-2022-36383
Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Word Search Puzzles game plugin = 2.0.1 at WordPress...
CVE-2022-36383 WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Word Search Puzzles game plugin = 2.0.1 at WordPress...
CVE-2022-36383 WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Word Search Puzzles game plugin = 2.0.1 at WordPress...
CVE-2022-36383
The vulnerability CVE-2022-36383 affects the WHA Word Search Puzzles WordPress plugin up to version 2.0.1. It enables Multiple Authenticated Stored XSS via insufficient sanitization/escaping, exploitable by users with contributor+ privileges. Affected component: plugin code handling input/output;...
WordPress plugin WHA Word Search Puzzles game 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2022-23342 · Unknown · Wha Word Search Puzzles
Name of the Vulnerable Software and Affected Versions: WHA Word Search Puzzles game plugin versions 2.0.1 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher...
PT-2022-37273 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the HashMgr class, specifically in the add...