9579 matches found
MS14-024: Description of the security update for the 2007 Office suite Service Pack 3 (SP3): May 13, 2014
None None...
rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155)
actionpack/lib/actiondispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query...
IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)
According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...
Coalition Calls For Net Reset in June
A new alliance composed of privacy and digital rights advocates are encouraging internet users to block mass surveillance and fight back against the National Security Agency on June 5. The coalition, dubbed Reset the Net is hoping to carry out its goal through the further implementation of SSL,...
CVE-2014-3151: K-Lite Codec Pack AVI buffer overflow
CVE-2014-3151 affects K-Lite Codec Pack (version 9.x and prior). The vulnerability is a memory corruption flaw triggered by processing a malformed AVI file, allowing a remote attacker to execute arbitrary code or cause a crash. The PacketStorm entry corroborates a memory corruption/vector via AVI...
[security bulletin] HPSBMU03030 rev.1 - HP Service Pack for ProLiant (SPP) Bundled Software running OpenSSL, Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04271396 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04271396 Version: 1 HPSBMU03030 rev....
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)
This host is missing a critical security update according to Microsoft Bulletin MS14-017. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2949660)
This host is missing a critical security update according to Microsoft Bulletin MS14-017. OpenVAS Vulnerability Test $Id: gbmscompatpackms14-017.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities 2949660 Authors: Antu Sanadi Copyright...
BlazeDVD Pro Player 6.1 - Stack Buffer Overflow Jump ESP
BlazeDVD Pro Player 6.1 - Stack Buffer Overflow Jump ESP Exploit-DB Note: XPSP3 - my $eip = pack'V',0x7c868667; jmp ESP on kernel32.dll Date: Tue Apr 8 2014 Vendor link: http://www.blazevideo.com/download.htmm Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro App Version:...
MS14-017: Description of the security update for Word 2010 Service Pack 1 and Service Pack 2: April 8, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted...
Microsoft Word File Converting CVE-2014-1757 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Description of the Office Web Apps update 2687504: April 8, 2014
None None...
MS14-017: Description of the security update for Word 2010 Service Pack 1 and Service Pack 2: April 8, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted...
HP Rapid Deployment Pack / HP Insight Control Server Deployment multiple security vulnerabilities
Multiple different vulnerabilities...
CVE-2014-1761
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attacker...
Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
IBM Tivoli Netcool/OMNIbus多个安全漏洞
IBM Tivoli Netcool/OMNIbus是运营管理软件，对业务应用、网络设备、Internet 协议和安全设备提供了集中式的管理。 1）部分未明输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞进行跨站脚本攻击，获取敏感信息或执行任意代码。 2）相关事件查看器的输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞进行跨站脚本攻击，获取敏感信息或执行任意代码。 3）EAL中存在多个未明错误。 0 IBM Tivoli Netcool/OMNIbus 7.x IBM Tivoli Netcool/OMNIbus 7.4.0 Fix Pack 2已经修复该漏洞，建议用户下载更新：...
CVE-2013-4057
Cross-site request forgery CSRF vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2013-4057
Cross-site request forgery CSRF vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...