11577 matches found
CVE-2016-10012
It was found that the boundary checks in the code implementing support for pre-authentication compression could have been optimized out by certain compilers. An attacker able to compromise the privilege-separated process could possibly use this flaw for further attacks against the privileged...
SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2016:3189-1)
This update for xorg-x11-libs fixes the following issues : - insufficient validation of data from the X server can cause a one byte buffer read underrun bsc1003023, CVE-2016-7953 - insufficient validation of data from the X server can cause out of boundary memory access or endless loops Denial of...
CVE-2016-4046
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...
CVE-2016-4046
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...
Scientific Linux Security Update : squid on SL7.x x86_64 (20161103)
The following packages have been upgraded to a newer upstream version: squid 3.5.20. Security Fixes : - Incorrect boundary checks were found in the way squid handled headers in HTTP responses, which could lead to an assertion failure. A malicious HTTP server could use this flaw to crash squid usi...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12361)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12364)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Information Disclosure Vulnerability (CNVD-2016-12366)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office. An attacker can exploit this...
PT-2016-2959 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier Description: The issue is caused by a buffer boundary error in the RegExp class of the Flash Player platform, related to the backtrack...
Microsoft Windows Graphics Component CVE-2016-7257 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Office 2016 for Mac Microsoft Office for Mac 2011 Microsoft Windows 7 for...
Microsoft Office CVE-2016-7267 Security Bypass Vulnerability
Description Microsoft Office is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Excel 2010 Service Pack 2 32-bit editio...
PT-2016-2960 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier Description: The issue is caused by a buffer boundary violation in the RegExp class of the Flash Player platform. Exploitation of this iss...
Microsoft Office CVE-2016-7262 Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Exc...
Microsoft Office CVE-2016-7266 Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Exc...
PT-2016-2958 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier Description: The issue is caused by a buffer boundary violation in the RegExp class for specific search strategies in the Flash Player...
Microsoft .NET Framework CVE-2016-7270 Information Disclosure Vulnerability
Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information. Successful exploits will lead to other attacks. Technologies Affected Microsoft .NET Framework 4.6.2 Microsoft Windows 10 Version 1607...
Microsoft Office CVE-2016-7275 DLL Loading Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
IBM Tivoli Storage Manager Client Local Buffer Overflow Vulnerability
IBM Tivoli Storage Manager Client is a storage-based solution in the IT administrator management component of IBM USA specifically tailored for enterprise use of IBM products. A local buffer overflow vulnerability exists in IBM Tivoli Storage Manager Client that stems from a failure to adequately...
openSUSE Security Update : libXrender (openSUSE-2016-1421)
This update of libXrender fixes the following issues : - insufficient validation of data from the X server could cause out of boundary memory writes boo1003002, CVE-2016-7949, CVE-2016-7950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
SUSE SLES11 Security Update : xorg-x11-libX11 (SUSE-SU-2016:3054-1)
This update for xorg-x11-libX11 fixes the following issues : - plug a memory leak bsc1002991, CVE-2016-7942 - insufficient validation of data from the X server can cause out of boundary memory read XGetImage or write XListFonts bsc1002991, CVE-2016-7942 Note that Tenable Network Security has...