1692 matches found
[SECURITY] Fedora 35 Update: libxls-1.6.2-5.fc35
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
[SECURITY] Fedora 34 Update: libxls-1.6.2-5.fc34
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
[SECURITY] Fedora 33 Update: libxls-1.6.2-5.fc33
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
VulnCheck KEV: CVE-2016-3235
Microsoft Office Object Linking & Embedding OLE dynamic link library DLL contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution...
Microsoft Office OLE DLL Side Loading Vulnerability
Microsoft Office Object Linking & Embedding OLE dynamic link library DLL contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution...
How to Exploit SQL Server Using OLE Automation
As part of the Imperva Research Labs we have the opportunity to examine various security scenarios. In this post, we will consider database security on SQL Server. One standard method that security practitioners use to protect databases is deploying honeypots and waiting for hackers to take the...
CVE-2014-4114
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a...
CVE-2020-18171
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding OLE which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details...
CVE-2020-18171
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding OLE which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details...
Design/Logic Flaw
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding OLE which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details...
CVE-2020-18171
CVE-2020-18171 affects TechSmith Snagit 19.1.0.2653. The issue arises from the software’s use of Object Linking and Embedding (OLE), which can be abused to obfuscate and embed crafted files to escalate privileges. The connected documents do not provide explicit exploit details or a confirmed patc...
CVE-2020-18171
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding OLE which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details...
CVE-2020-18171
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding OLE which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details...
June 8, 2021—KB5003637 (OS Builds 19041.1052, 19042.1052, and 19043.1052)
None None...
Microsoft Windows Multiple Vulnerabilities (KB5003173)
This host is missing a critical security update according to Microsoft KB5003173 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB5003171)
This host is missing a critical security update according to Microsoft KB5003171 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wormable Windows Bug Opens Door to DoS, RCE
Microsoft’s May Patch Tuesday release addressed a modest 55 cybersecurity vulnerabilities, including just four critical bugs. It’s the smallest monthly update from the computing giant since 2020, but it does contain a patch for a concerning wormable vulnerability found in the Windows OS. The good...
CVE-2021-31194
OLE Automation Remote Code Execution Vulnerability...