PT-2016-1696

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Microsoft Word version 2016 for Mac Microsoft Office Compatibility Pack version SP3 Microsoft Excel Viewer Description The issue is caused by a buffer overflow. Exploitation of this issue may allo...

CVE-2016-0122: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Microsoft Office CVE-2016-0127 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

CVE-2016-2098

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

DEBIAN-CVE-2016-2098

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

Design/Logic Flaw

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

CVE-2016-2098

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

Immunity Canvas: JENKINS_JRMP_DESERIALIZATION

Name| jenkinsjrmpdeserialization ---|--- CVE| CVE-2016-0788 Exploit Pack| CANVAS Description| jenkinsjrmpdeserialization Notes| CVE Name: CVE-2016-0788 VENDOR: Jenkins NOTES: Versions tested: Ubuntu Linux 14.04.3 Jenkins 1.598 - 6 / 7 / 8 Jenkins 1.649 - 7 / 8 Windows 7 Ultimate SP1 Jenkins 1.598...

CVE-2016-2098

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

CVE-2016-2098

CVE-2016-2098 affects Ruby on Rails Action Pack render usage. Affected: ActionPack in Rails before 3.2.22.2, Rails 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2. Root cause: unrestricted/unsafe use of the render method allowing attacker-controlled arguments, enabling remote code execution of Ruby...

CVE-2016-2098: Improper Input Validation

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

All-In-One Intellijoy App Pack - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application All-In-One Intellijoy App Pack published at the 'play' market has multiple vulnerabilities...

Solitaire Free Pack - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solitaire Free Pack published at the 'play' market has multiple vulnerabilities...

550+ Card Games Solitaire Pack - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application 550+ Card Games Solitaire Pack published at the 'play' market has multiple vulnerabilities...

Starter Pack App - Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Starter Pack App - Free published at the 'play' market has multiple vulnerabilities...

Glim - Free Flat Icon Pack - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glim - Free Flat Icon Pack published at the 'play' market has multiple vulnerabilities...

Glasklart - Icon Pack - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Glasklart - Icon Pack published at the 'play' market has multiple vulnerabilities...

Poweramp Standard Widget Pack - Dangerous filesystem permissions, Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Poweramp Standard Widget Pack published at the 'play' market has multiple vulnerabilities...

Emoticon pack, Pink pig - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Emoticon pack, Pink pig published at the 'play' market has multiple vulnerabilities...

Emoticons pack, Mix Characters - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Emoticons pack, Mix Characters published at the 'play' market has multiple vulnerabilities...