Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update

An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

Asterisk 13.17.2 - 'chan_skinny' Remote Memory Corruption

Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer module CVE-2017-17090 - AST-2017-013 Tested on: Asterisk 13.17.2dfsg-2 Description: Asterisk is prone to a remote unauthenticated memory exhaustion The vulnerability is due to an error when the...

Elastic Kibana X-Pack CVE-2018-3819 Open Redirect Vulnerability - Linux

Elastic Kibana with X-Pack is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana X-Pack CVE-2018-3819 Open Redirect Vulnerability - Windows

Elastic Kibana with X-Pack is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-8451

With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...

CVE-2017-11482

The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2018-1000009 via org.jvnet.hudson.plugins:checkstyle (>=3.32, <=3.43)

org.jvnet.hudson.plugins:checkstyle MAVEN version =3.32, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php 1.0 Source cves: CVE-2018-1000009 Source advisory: MEND:CVE-2018-1000009...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2018-1000008 via org.jvnet.hudson.plugins:pmd (>=3.33, <=3.42)

org.jvnet.hudson.plugins:pmd MAVEN version =3.33, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php 1.0 Source cves: CVE-2018-1000008 Source advisory: MEND:CVE-2018-1000008...

CVE-2017-18044

A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted...

Description of the security update for Office 2010: January 9, 2018

Description of the security update for Office 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018 (KB4011607)

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: January 9, 2018 KB4011607 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more abou...

Description of the security update for 2007 Microsoft Office Suite: January 9, 2018 (KB4011656)

Description of the security update for 2007 Microsoft Office Suite: January 9, 2018 KB4011656 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, ...

PT-2018-1104

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Compatibility Pack affected versions not specified Microsoft Word affected versions not specified Description A remote code execution issue exists in Microsoft Office software d...

PT-2018-1106

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Compatibility Pack affected versions not specified Microsoft Word affected versions not specified Description A remote code execution issue exists in Microsoft Office software d...

PT-2018-1105

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Compatibility Pack affected versions not specified Microsoft Word affected versions not specified Description A remote code execution issue exists in Microsoft Office software d...

Microsoft Excel Buffer Overflow

The vulnerability of Microsoft Excel editors, Microsoft Excel Viewer, and the Microsoft Office Compatibility Pack is related to improper handling of objects in memory. Exploitation of this vulnerability may allow a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Word, the Microsoft Office Compability Pack, and other Microsoft Office programs arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current...

CVE-2017-8443

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Microsoft Outlook 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4011273)

This host is missing an important security update according to Microsoft KB4011273 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011602)

This host is missing an important security update according to Microsoft KB4011602 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...