MS11-094: Description of the security update for PowerPoint Viewer 2007: December 13, 2011

MS11-094: Description of the security update for PowerPoint Viewer 2007: December 13, 2011 Introduction Microsoft has released security bulletin MS11-094. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS12-038: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: June 12, 2012

MS12-038: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: June 12, 2012 Microsoft has released security bulletin MS12-038. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

MS12-046: Description of the security update for Office 2010 (Vbe7.dll): July 10, 2012

MS12-046: Description of the security update for Office 2010 Vbe7.dll: July 10, 2012 INTRODUCTION Microsoft has released security bulletin MS12-046. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-045: Description of the security update for Excel 2010: June 14, 2011

MS11-045: Description of the security update for Excel 2010: June 14, 2011 Introduction Microsoft has released security bulletin MS11-045. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-060: Description of the security update for Visio 2010: August 9, 2011

MS11-060: Description of the security update for Visio 2010: August 9, 2011 Microsoft has released security bulletin MS11-060. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:http://www.microsoft.com/security/pc-security/bulletins/201108.aspxSkip...

Debian DLA-772-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2012-6704, CVE-2016-9793 Eric Dumazet found that a local user with CAPNETADMIN capability could set a socket's buffer size to be negative, leading ...

RoundCube Webmail Cross-Site Scripting Vulnerability (CNVD-2016-13003)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A cross-site scripting vulnerability exists in versions of Roundcube Webmail prior to 1.2.0. A remote attacker can exploit this vulnerability to inject...

Verizon Webmail client stored XSS vulnerability-vulnerability warning-the black bar safety net

Write in front of words Before that, I had specialized to write a technical article to explain in detail through Verizon Webmial client of server-side vulnerabilities article transfer gate button. But I recently went in this client found some very interesting vulnerabilities, these vulnerabilitie...

MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016

MS16-155: Description of the Security Only Update for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. A security vulnerability exists in t...

CVE-2016-9685

A flaw was found in the Linux kernel's implementation of XFS file attributes. Two memory leaks were detected in xfsattrshortformlist and xfsattr3leaflistint when running a docker container backed by xfs/overlay2. A dedicated attacker could possible exhaust all memory and create a denial of servic...

Ruby on Rails Active Record Security Bypass Vulnerability (Jan 2016) - Linux

Ruby on Rails is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rubyonrails:rails";...

Ruby on Rails Active Record Security Bypass Vulnerability (Jan 2016) - Windows

Ruby on Rails is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rubyonrails:rails";...

UBUNTU-CVE-2015-8952

The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service soft lockup via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samb...

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012: October 11, 2016

MS16-120: Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in Microsoft .NET Framework. The vulnerabilities could allow remote code execution if ...

MS16-107: Description of the security update for PowerPoint 2013: September 13, 2016

MS16-107: Description of the security update for PowerPoint 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilitie...

MS16-107: Description of the security update for Outlook 2010: September 13, 2016

MS16-107: Description of the security update for Outlook 2010: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

MS16-107: Description of the security update for PowerPoint Viewer 2010: September 13, 2016

MS16-107: Description of the security update for PowerPoint Viewer 2010: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...

DEBIAN-CVE-2016-6316

Cross-site scripting XSS vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers...

PT-2016-3696

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.3.90 Description The issue allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate event from template attributes.ctp. Recommendation...

GitLab: XSS On meta tags in profile page

The profile page https://gitlab.com/u/ does not properly sanitize quotation marks, allowing for injection of attributes into the meta tags. This allows for redirection to phishing sites and other various nefarious things. I've managed to get my profile page to redirect to Bing by setting my bio t...