8472 matches found
Microsoft Office CVE-2016-3365 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Microsoft Office CVE-2016-3362 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Microsoft Office CVE-2016-3361 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Microsoft Office CVE-2016-3358 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Microsoft Office CVE-2016-3357 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Microsoft Office CVE-2016-3363 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Ian Dunn: CSV Injection in Camptix
Hello, Ian! I see you tried to escape "=, -, +, @" in your code 151516, but let me show simple workaround. I've made CSV injection by using this string ";=cmd|' /C calc'!A5" without doublequotes. ";" will bypass your trying to set the quote in the beginning of the string. ";" acts as a new cell...
Microsoft Excel Viewer Installed (credentialed check)
Binary data microsoftexcelviewerinstalled.nbin...
Microsoft Excel Viewer Unsupported Version Detection
All versions of Microsoft Excel Viewer are no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. Note that Excel Viewer was formerly known as Excel Viewer 2007. The...
Ian Dunn: Bypass fix in https://hackerone.com/reports/151516 report.
Hi. Steps to reproduce: 1. The same in previous https://hackerone.com/reports/151516 report. 2. But payload to bypass your fix would be like this: ;=cmd|' /C calc'!A0 Solution: 1. Add ; in your escape function esccsv on line 2858 of camptix.php References: 1...
The vulnerabilities of the Microsoft Office suite of programs, the Microsoft Word word processor, the Microsoft Excel spreadsheet editor, the Microsoft Office Web Apps suite of programs, the Microsoft PowerPoint presentation software, and the Microsoft SharePoint Server corporate application allow a perpetrator to execute arbitrary code.
The vulnerabilities of the Microsoft Office suite of programs, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, the Microsoft Office Web Apps suite of programs, the Microsoft PowerPoint presentation software, and the Microsoft SharePoint Server corporate application are...
The vulnerabilities of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer allow a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer are caused by buffer overflow attacks. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially crafted Office document from a remote...
August 2, 2016 — KB3176929 (OS Build 14393.10)
None None...
CVE-2016-3555
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin...
CVE-2016-3555
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin...
CVE-2016-3555
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PGC / Excel Plugin...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04951)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office, which originates from the program failin...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04973)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office software. An attacker can exploit this...
Microsoft Excel Arbitrary Code Execution Vulnerability (CNVD-2016-04960)
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An arbitrary code execution vulnerability exists in Microsoft Office, which stems from the program's failu...