9542 matches found
Description of the security update for SharePoint Server 2013: September 12, 2017
Description of the security update for SharePoint Server 2013: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Description of the security update for Publisher 2007: September 12, 2017
Description of the security update for Publisher 2007: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...
Description of the security update for Publisher 2010: September 12, 2017
Description of the security update for Publisher 2010: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...
Description of the security update for 2007 Microsoft Office Suite: September 12, 2017
None None...
Description of the security update for Office 2010: September 12, 2017
Description of the security update for Office 2010: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for SharePoint Server 2010 Office Web Apps: September 12, 2017
Description of the security update for SharePoint Server 2010 Office Web Apps: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: September 12, 2017
None None...
Description of the security update for Office Web Apps Server 2013: September 12, 2017
None None...
Security Updates for Microsoft Office Compatibility Pack SP3 (September 2017)
Microsoft Office Compatibility Pack SP3 is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the...
PT-2017-2960 · Microsoft · Office Web Apps +6
Name of the Vulnerable Software and Affected Versions: Microsoft Office Web Apps versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft SharePoint Server versions affected versions not specified Microsoft Office Compatibility Pack versions...
PT-2017-2959 · Microsoft · Excel For Mac +4
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel for Mac affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Compatibility...
X-Pack Security 5.6.0 and 5.5.3 security update
X-Pack Security permission issue ESA-2017-18 An error was found in the X-Pack Security privilege enforcement. If a user has either ‘delete’ or ‘index’ permissions on an index in a cluster, they may be able to issue both delete and index requests against that index. Previously if a user had bulk...
melbourneflatpackkitchens.com.au XSS vulnerability
Vulnerable URL: http://www.melbourneflatpackkitchens.com.au/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...
FFmpeg 'mxf_read_primer_pack' function input validation vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'mxfreadprimerpack' function in the libavformat/mxfdec.c file in FFmpeg version 3.3.3. A remote attacker can exploit this vulnerability to bypass...
DEBIAN-CVE-2017-14169
In the mxfreadprimerpack function in libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, an integer signedness error might occur when a crafted file, which claims a large "itemnum" field such as 0xffffffff, is provided. As a result, the variable "itemnum" turns negative, bypassing the check for a large...
August 2017 Preview of the Quality Rollups for the .NET Framework 2.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2: August 15, 2017
August 2017 Preview of the Quality Rollups for the .NET Framework 2.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2: August 15, 2017 View products that this article applies to. Summary This article lists the Quality Rollups for the .NET Framework 2.0 Service Pack 2 SP2, 4.5.2, and 4.6 for...
Unspecified vulnerability in Elasticsearch X-Pack Security TLS trust manager
Elasticsearch X-Pack is an extension of Elastic Stack log analysis system from the Dutch company Elasticsearch.Security TLS trust manager is one of the security certificate managers. A security vulnerability exists in Elasticsearch X-Pack Security TLS trust manager versions 5.0.0 through 5.5.1. N...
Elasticsearch X-Pack and Reporting Plugin Information Disclosure Vulnerability
Elasticsearch X-Pack is a Dutch Elasticsearch company Elastic Stack log analysis system extension. reporting is a plug-in application in which it can also be used independently. A security vulnerability exists in the Reporting feature in Elasticsearch X-Pack versions prior to 5.5.2 and Reporting...
Security feature bypass
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...
CVE-2017-8446
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...