9952 matches found
Description of the security update for Office 2013: May 9, 2017
Description of the security update for Office 2013: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for SharePoint Foundation 2013: May 9, 2017
Description of the security update for SharePoint Foundation 2013: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Description of the security update for 2007 Microsoft Office Suite: May 9, 2017
None None...
Joomla Core HTML Attributes Cross-Site Scripting Filter Privilege Escalation (CVE-2017-7986)
A privilege escalation vulnerability exists in Joomla Core. Unauthorized remote attackers may leverage this vulnerability to gain administrative access to the vulnerable server...
Joomla! cross-site scripting vulnerability (CNVD-2017-06582)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 1.5.0 through 3.6.5. The vulnerability arises due to insufficient filtering of...
NetIQ Access Manager Information Disclosure Vulnerability (CNVD-2017-05677)
NetIQ Access Manager provides a simple, secure, and scalable solution to handle all of your web access needs. Whether your users are using a cell phone or laptop to access on-premise or cloud-based services, Access Manager ensures security and provides a single sign-on experience. NetIQ Access...
CVE-2017-7986
CVE-2017-7986 affects Joomla! 1.5.0 through 3.6.5; it is caused by inadequate filtering of specific HTML attributes, leading to cross-site scripting in various components. The issue is fixed in 3.7.0. Exploitation details are not provided beyond the XSS description; upgrade to 3.7.0+ to mitigate.
CVE-2017-7986
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...
CVE-2017-7986: Improper Neutralization of Input During Web Page Generation
In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...
PT-2017-18048
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.0 through 3.6.5 Description The issue is related to inadequate filtering of specific HTML attributes, which leads to XSS vulnerabilities in various components. The estimated number of potentially affected devices worldwide...
CVE-2017-5190
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
Improper access control
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
PT-2017-16375
Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.2 before SP3 HF1 and 4.3 before SP1 HF1 Description The issue is related to a concurrency problem that causes information leakage when NetIQ Access Manager is configured as a SAML 2.0 Identity Server with Virtua...
CVE-2017-5190: Exposure of Sensitive Information to an Unauthorized Actor
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Description of the security update for Excel Services on SharePoint Server 2010: April 11, 2017
Description of the security update for Excel Services on SharePoint Server 2010: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Cross-site Scripting (XSS)
vuejs is vulnerable to cross-site scripting XSS attacks. These attacks are possible when rendering html attributes...