1666 matches found
CVE-2014-1824
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...
Remote code execution
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...
CVE-2014-1824
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...
CVE-2014-1824
CVE-2014-1824 affects Windows Journal remote code execution via a crafted .JNT journal file. Concrete details show impact on multiple Windows client/server platforms (Windows Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8/8.1; Windows Server 2012/2012 R2; Windows RT/RT 8.1). Root cause i...
Microsoft July 2014 Patch Tuesday fixes 29 IE Vulnerabilities
Microsoft today issued two critical-, three important-, and one moderate-rated security bulletins in the July edition of its monthly Patch Tuesday release. The updates address 29 security vulnerabilities in the company’s Windows operating system, Internet Explorer browser, and server software. Th...
CVE-2014-1824: Improper Control of Generation of Code
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...
MS14-038: Vulnerability in Windows journal could allow remote code execution: July 8, 2014
Resolves a vulnerability in Windows that could allow remote code execution if a user opens a specially crafted journal file. An attacker would be unable to force users to go to a specially crafted website.INTRODUCTIONMicrosoft has released security bulletin MS14-038. To learn more about this...
MS14-038: Description of the security update for Windows-based systems that don't have update 2919355 installed: July 8, 2014
Resolves a vulnerability in Windows that could allow remote code execution if a user opens a specially crafted Journal file.INTRODUCTIONMicrosoft has released security bulletin MS14-038. To learn more about this security bulletin: Home...
PT-2014-1745
Name of the Vulnerable Software and Affected Versions Windows Journal versions in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 Description A remote code execution issue exists i...
MS14-038: Vulnerability in Windows Journal Could Allow Remote Code Execution (2975689)
The remote Windows host is affected by a code execution vulnerability due to an error related to parsing Windows Journal files. An attacker could convince a user into opening a specially crafted file, resulting in the execution of arbitrary code. C Tenable Network Security, Inc...
OpenJournal 2.0 Authentication Bypassing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9598/info It has been reported that OpenJournal is prone to an authentication bypass vulnerability. This issue is caused by the application failing to properly sanitize URI specified parameters. Successful exploitation of...
Open Conference/Journal/Harvester Systems <= 2.3.x - Multiple RCE Vulnerabilities
No description provided by source. !/usr/bin/python Open Conference/Journal/Harvester Systems = 2.3.X multiple remote code execution vulnerabilities vendor: Public Knowledge Project pkp -http://pkp.sfu.ca/ software link: http://pkp.sfu.ca/download author: mrme::rwx kru email:...
LiveJournal 1.1 CSS HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9727/info LiveJournal is reportedly prone to HTML injection via Cascading Style Sheet CSS tags. It is possible to inject hostile HTML and script code into journal entries through this vulnerability. This could potentially...
CVE-2013-4429: Undefined Security Weakness
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the 1 artefact id in an upload action when creating a journal or 2 instconfartefactidselectedID parameter in an...
CVE-2013-6142
DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service resource consumption via IP packets containing errors that trigger event-journal messages...
Design/Logic Flaw
DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service resource consumption via IP packets containing errors that trigger event-journal messages...
CVE-2013-6142
DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service resource consumption via IP packets containing errors that trigger event-journal messages...
PT-2016-4073 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.3.3 Description: The issue allows local users to gain privileges or cause a denial of service use-after-free by leveraging improper access to a certain error field in the ext4 journal stop function...
Google Pays $17 Million to Settle Privacy Violations
Thirty-seven states are claiming a privacy victory against Google and will split a $17 million settlement from the search giant. Google, which generated $2.97 billion in online advertising revenue in the third quarter, was deliberately bypassing default privacy settings in Apple’s Safari browser ...
CVE-2013-4391
Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...