1473 matches found
Malicious Package
Overview jet-anchor-test is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
Malicious code in jet-anchor-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6cc3c062f5b8483a9c54231b0e57bff853098b38381439e1041b240085a4767 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] Fedora 35 Update: golang-github-apache-beam-2-2.33.0~RC1-7.fc35
Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...
[SECURITY] Fedora 36 Update: golang-github-apache-beam-2-2.33.0~RC1-7.fc36
Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...
Malicious code in jet-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34f919ca3a5e80ede480de09283535566b5038e55699bc808d8880b8787b1a27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4021 Malicious code in jet-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34f919ca3a5e80ede480de09283535566b5038e55699bc808d8880b8787b1a27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Updates for Microsoft Office Products C2R (August 2019)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the...
The vulnerability of the Microsoft Jet Red Database Engine (MS Jet (Red)) and the Access Connectivity Engine on Microsoft Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft Jet Red Database Engine MS Jet Red and the Access Connectivity Engine on Microsoft Windows operating systems is related to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2021-42293
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...
CVE-2021-42293
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...
CVE-2021-42293
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...
CVE-2021-42293
The CVE-2021-42293 entry concerns a elevation of privilege flaw in Microsoft's Jet Red Database Engine and Access Connectivity Engine. Connected sources confirm affected components are the Jet Red database engine and the Access connectivity engine used by Office products (notably Office 2013/2016...
CVE-2021-42293 Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
...
Microsoft Office 2013 Elevation of Privilege Vulnerability (KB5002104)
This host is missing an important security update according to Microsoft KB5002104 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2016 Privilege Escalation Vulnerability (KB5002099)
This host is missing an important security update according to Microsoft KB5002099 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
CVE-2021-44437
A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...
Description of the security update for Office 2013: December 14, 2021 (KB5002104)
Description of the security update for Office 2013: December 14, 2021 KB5002104 Summary This security update resolves a Microsoft Jet Red database engine and access connectivity engine elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilitie...
Description of the security update for Office 2016: December 14, 2021 (KB5002099)
None None...
KLA12389 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...