473 matches found
Microsoft Access Remote Code Execution Vulnerability (KB4011665)
This host is missing an important security update according to Microsoft KB4011665 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Updates for Microsoft Access Products (March 2018)
The Microsoft Access Products are missing a security update. They are, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully...
Microsoft Access Remote Code Execution Vulnerability (KB4011234)
This host is missing an important security update according to Microsoft KB4011234 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Update for Microsoft Access 2016 (KB4011665) 64-Bit Edition
A security vulnerability exists in Microsoft Access 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Access 2016 (KB4011665) 32-Bit Edition
A security vulnerability exists in Microsoft Access 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Access 2013 (KB4011234) 32-Bit Edition
A security vulnerability exists in Microsoft Access 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
KLA11213 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An improper handling of...
Microsoft Access CVE-2018-0903 Remote Code Execution Vulnerability
Description Microsoft Access is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition; this can result in the attacker gaining complete...
Cross site scripting
Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting XSS vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability"...
CVE-2018-0799
Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting XSS vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability"...
CVE-2018-0799
Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting XSS vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability"...
CVE-2018-0799
CVE-2018-0799 is a cross-site scripting (XSS) vulnerability in Microsoft Access within SharePoint Server 2013 SP1 and SharePoint Server 2016, caused by improper sanitization of image field values edited in Design view. Exploitation can allow JavaScript execution in the victim’s browser, potential...
Microsoft Access Tampering Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft Access does not properly sanitize inputs to image fields edited within Design view. An attacker could exploit the vulnerability by sending a specially crafted file to a victim, or by hosting the file on a web server. The attacker who...
Microsoft Access CVE-2018-0799 Cross Site Scripting Vulnerability
Description Microsoft Access is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...
KLA11170 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface and obtain sensitive information. Below is a complete list of vulnerabilities: 1. Elevation of privilege vulnerabilities in...
CVE-2017-15272
The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a...
Default credentials
The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a...
CVE-2017-15272
The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a...
Gaza Cybergang – updated activity in 2017:
1. Summary information The Gaza cybergang is an Arabic-language, politically-motivated cybercriminal group, operating since 2012 and actively targeting the MENA Middle East North Africa region. The Gaza cybergang's attacks have never slowed down and its typical targets include government...
