425 matches found
MS16-130: Security Update for Microsoft Windows (3199172)
The remote Windows host is missing a security update or security rollup. It is, therefore, affected by the following vulnerabilities : - A remote code execution vulnerability exists in the Windows image file handling functionality due to improper handling of image files. An unauthenticated, remot...
November 8, 2016 — KB3198585 (OS Build 10240.17190)
None None...
November 8, 2016 — KB3198586 (OS Build 10586.679)
None None...
Stable Channel Update for Chrome OS
The Stable channel has been updated to 54.0.2840.79 Platform version: 8743.76.0 for all Chrome OS devices except HP Chromebook 13 G1, Acer Chromebook 14 for Work and Thinkpad 13 Chromebook. This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be...
Fedora 24 : 1:epiphany / webkitgtk4 (2016-f4b5897686)
Update WebKitGTK+ package to 2.14.1. Major changes in 2.14.0 : - Threaded compositor is enabled by default in both X11 and Wayland. - Accelerated compositing is now supported in Wayland. - Clipboard works in Wayland too. - Memory pressure handler always works even when cgroups is not present or n...
July 12, 2016 — KB3163912 (OS Build 10240.17024)
None None...
2345王牌输入法本地权限提升漏洞
Microsoft Windows API使用CreateProcess函数创建新的进程及其主线程。 CreateProcess函数的格式如下： BOOL CreateProcess LPCTSTR lpApplicationName, LPTSTR lpCommandLine, LPSECURITYATTRIBUTES lpProcessAttributes, LPSECURITYATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCTST...
2345 Ace Input Method Local Elevation of Privilege Vulnerability
2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2,3,4,5 Network Technology Co. The system service installed by 2345 Ace Input Method provides the ability to create an elevated privilege process, but a vulnerability exists in the validation process. Due to improper...
Tails 1.3 - The Amnesic Incognito Live System
Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity , and helps you to: use the Internet anonymously and circumvent censorship ; all connections to the Internet are forced to go through the...
VulnCheck KEV: CVE-2014-4077
Microsoft Input Method Editor IME Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default with the default set as disabled. IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE IME for Japanese is installed which allows...
PT-2014-2028 · Microsoft · Windows Server 2008 +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server versions 2003 SP2 through 2008 SP2 and R2 SP1 Microsoft Windows Vista version SP2 Microsoft Windows 7 version SP1 Microsoft Office version 2007 SP3 Description: The issue is related to the Input Method Editor IME...
Advance Notification Service for the November 2014 Security Bulletin Release
Today, we provide advance notification for the release of 16 Security Bulletins. Five of these updates are rated Critical, nine are rated as Important, and two are rated Moderate in severity. These updates are for Microsoft Windows, Internet Explorer, Office, Exchange, .NET Framework, Internet...
QQ input method pure version 1. 1 The presence of IME vulnerability-vulnerability warning-the black bar safety net
In the login system before, or Telnet before you can open the input method selected help, you can open the IE browser, by saving the page you can open the computer file list. The main is now popular PC end windows 8 system...
DEBIAN-CVE-2014-5026
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...
UBUNTU-CVE-2014-5026
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...
CVE-2014-5026
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...
CVE-2014-5026: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...
