CVE-2011-3373: Improper Neutralization of Input During Web Page Generation

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...

Microsoft Outlook for Android Bug Opens Door to XSS

Users of the Microsoft Outlook for Android app should update their apps to avoid a range of attacks. The bug CVE-2019-1460 would allow an attacker to perform cross-site scripting XSS attacks on the affected systems and run scripts in the security context of the current user, according to...

Open-source Ticket Request System Denial of Service Vulnerability

Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the...

Unspecified Vulnerability in Open-source Ticket Request System Help Desk (CNVD-2019-42577)

Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone, email, etc. into different queues and service levels, and service personn...

CVE-2019-18793

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

CVE-2019-18793

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

CVE-2019-18793: Improper Neutralization of Input During Web Page Generation

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

Description of the security update for Office Online Server: November 12, 2019

None None...

MS15-081: Description of the security update for Office 2013: August 11, 2015

MS15-081: Description of the security update for Office 2013: August 11, 2015 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see...

The vulnerability of the Login Help sub-component of the Oracle Application Object Library, a component of the Oracle E-Business Suite, allows a perpetrator to cause a service failure.

The vulnerability of the Login Help sub-component of the Oracle Application Object Library, a component of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions using HTTP...

winrar 5.80 - XML External Entity Injection Exploit

Exploit Title: winrar 5.80 - XML External Entity Injection Exploit Author: albalawi Vendor Homepage: https://win-rar.com/fileadmin/winrar-versions/winrar-x64-58b2.exe Version: 5.80 Tested on: Microsoft Windows Version 10.0.18362.418 64bit POC 1- python -m SimpleHTTPServer listens Port 8000 2- ope...

CVE-2019-3027

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

CVE-2019-3027

The CVE-2019-3027 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (AOL), Login Help component. Affected versions are 12.2.5–12.2.9. The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access, potentially enabling partial denial of serv...

CVE-2019-3027

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

CVE-2019-3027: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

Oracle E-Business Suite CVE-2019-3027 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in 'Oracle Application Object Library' product. This vulnerability can be exploited over the 'HTTP' protocol. The 'Login Help' component is affected. This vulnerability affects the following supported versions: 12.2.5...

Description of the security update for Office 2010: October 8, 2019

Description of the security update for Office 2010: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software when the software fails to correctly handle objects in memory. . To learn more about the vulnerability, see...

Description of the security update for SharePoint Enterprise Server 2013: October 8, 2019

None None...

Description of the security update for SharePoint Server 2019 Language Pack: September 10, 2019

None None...

Fedora 29 : nfdump (2019-9013b5e75d)

2019-08-14 - Fix compile issues - Fix output buffer size for lzo1xdecompresssafe 2019-08-07 - Fix VerifyExtensionMap 179 2019-08-06 - Fix compile errors 2019-08-05 - Fix nfdump.1 man page. 175 - Fix off by 1 array. 173 - Fix use after free in ModifyCompressFile - Add bound checks in AddExporterSt...