DSA-3509-1 rails - security update

Bulletin has no description...

Microsoft Windows Privilege Elevation Vulnerability (3140410)

This host is missing an important security update according to Microsoft Bulletin MS16-031 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft InfoPath Memory Corruption Vulnerability (3141806)

This host is missing an important security update according to Microsoft Bulletin MS16-029. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Secondary Logon Privilege Elevation Vulnerability (3143141)

This host is missing an important security update according to Microsoft Bulletin MS16-032. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0094 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

PT-2016-1369

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 through 2016 Office versions 2010 SP2 through 2013 SP1 Word for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Word Viewer affected versions not specified Word Automation Services on...

Office Web Apps Server Code Execution

The vulnerability in the Office Web Apps Server web server, Microsoft Word and Word For Mac text editors, the Microsoft Office Compatibility Pack, Word Viewer software for reading doc files, and the Microsoft SharePoint Server enterprise application is caused by a buffer overflow. Exploitation of...

Possible remote code execution vulnerability in Action Pack

There is a possible remote code execution vulnerability in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2016-2098. Versions Affected: 3.2.x, 4.0.x, 4.1.x, 4.2.x Not affected: 5.0+ Fixed Versions: 3.2.22.2, 4.1.14.2, 4.2.5.2 Impact ------ Applications that pass unverifi...

Agent-VBS

An XSS Channel is an interactive communication channel between two systems which is opened by an XSS attack. At a technical level, it is a type of AJAX application which can obtain commands, send responses back and is able to talk cross-domain. 'Exploit Pack VBS Agent code + Web IE Object - Juan...

Agent-XSS

An XSS Channel is an interactive communication channel between two systems which is opened by an XSS attack. At a technical level, it is a type of AJAX application which can obtain commands, send responses back and is able to talk cross-domain. // Exploit Pack server - Change 127.0.0.1 to your IP...

rubygem-actionpack: Object leak vulnerability for wildcard controller routes in Action Pack

A flaw was found in the Action Pack component's caching of controller references. An attacker could use this flaw to cause unbounded memory growth, potentially resulting in a denial of service...

rubygem-actionpack: possible object leak and denial of service attack in Action Pack

A flaw was found in the way the Action Pack component performed MIME type lookups. Since queries were cached in a global cache of MIME types, an attacker could use this flaw to grow the cache indefinitely, potentially resulting in a denial of service...

PT-2016-3439

Name of the Vulnerable Software and Affected Versions Flexera InstallShield through 2015 SP1 AVEVA Edge InstallShield affected versions not specified Description The issue is related to an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse DLL in the...

Microsoft Office Compatibility Pack Word Code Execution

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Office suite of programs, and the Microsoft Word text editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document from a...

Microsoft Word Code Execution

The vulnerabilities of Microsoft Word text editor, Office Web Apps Server web server, Word Viewer document-reading programs, Microsoft SharePoint Server corporate application suite, Microsoft Office software suite, and the Microsoft Office Compatibility Pack suite are caused by buffer overflow...

Microsoft Word Code Execution

The vulnerabilities of Microsoft Word text editor, Office Web Apps Server web server, Word Viewer document-reading programs, Microsoft SharePoint Server corporate application suite, Microsoft Office software suite, and the Microsoft Office Compatibility Pack suite are caused by buffer overflow...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2016-01170)

SharePoint Server is an integrated suite of server capabilities that provides comprehensive content management and enterprise search, accelerates shared business processes and simplifies information sharing across boundaries. Microsoft SharePoint Foundation 2013 SP1 has a cross-site scripting...

DEBIAN-CVE-2016-0751

actionpack/lib/actiondispatch/http/mimetype.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service...

CVE-2016-0751

actionpack/lib/actiondispatch/http/mimetype.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service...

DEBIAN-CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...