4299 matches found
Microsoft Office Compatibility Pack Service Pack 3 Remote Code Execution Vulnerability (KB3203438)
This host is missing an important security update according to Microsoft KB3203438 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Update for Microsoft Office Compatibility Pack Service Pack 3 (KB3203438)
A security vulnerability exists in Microsoft Office Compatibility Pack Service Pack 3 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: June 13, 2017
None None...
PT-2017-2335
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft OneNote affected versions not specified Microsoft Word affected versions not specified Office Web Apps Server affected versions not specified Microsoft SharePoint Server affected...
[SECURITY] Fedora 26 Update: squirrelmail-1.4.22-19.fc26
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no JavaScript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
Microsoft Office DoS
The vulnerabilities of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office arise from operations that occur outside of the buffer in memory. Exploitation of these vulnerabilities can allow a malicious...
USN-3308-1 puppet vulnerabilities
Dennis Rowe discovered that Puppet incorrectly handled the search path. A local attacker could use this issue to possibly execute arbitrary code. CVE-2014-3248 It was discovered that Puppet incorrectly handled YAML deserialization. A remote attacker could possibly use this issue to execute...
[SECURITY] Fedora 25 Update: squirrelmail-1.4.22-19.fc25
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no JavaScript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
CentOS 7 : nss (CESA-2017:1365)
An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
RHEL 7 : nss (RHSA-2017:1365)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1365 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
Scientific Linux Security Update : nss on SL6.x i386/x86_64 (20170530)
Security Fixes : - A NULL pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. CVE-2017-7502 Bug Fixes : - The Network Security Services NSS code and Certificate Authority CA...
Scientific Linux Security Update : nss on SL7.x x86_64 (20170530)
Security Fixes : - A NULL pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. CVE-2017-7502 Bug Fixes : - The Network Security Services NSS code and Certificate Authority CA...
RHEL 6 : nss (RHSA-2017:1364)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1364 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
HTTP/2 push is tougher than I thought
"HTTP/2 push will solve that" is something I've heard a lot when it comes to page load performance problems, but I didn't know much about it, so I decided to dig in. HTTP/2 push is more complicated and low-level than I initially thought, but what really caught me off-guard is how inconsistent it ...
RedHat Update for nss RHSA-2017:1365-03
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple MacOS 32-Bit Syscall Exit Kernel Register Leak(CVE-2017-2509)
The XNU kernel, when compiled for a x86-64 CPU, can run 32-bit x86 binaries in compatibility mode. 32-bit binaries use partly separate syscall entry and exit paths. To return to userspace, unixsyscall in bsd/dev/i386/systemcalls.c calls threadexceptionreturn in osfmk/x8664/locore.s, which in turn...
Apple macOS - 32-bit syscall exit Kernel Register Leak Exploit
Exploit for macOS platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1149 The XNU kernel, when compiled for a x86-64 CPU, can run 32-bit x86 binaries in compatibility mode. 32-bit binaries use partly separate syscall entry and exit paths. To return to...
Apple macOS - '32-bit syscall exit' Kernel Register Leak
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1149 The XNU kernel, when compiled for a x86-64 CPU, can run 32-bit x86 binaries in compatibility mode. 32-bit binaries use partly separate syscall entry and exit paths. To return to userspace, unixsyscall in...
Moderate: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...