CVE-2015-2415: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2015:1174-1)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix various bugs and security issues. The following vulnerabilities have been fixed : CVE-2015-3636: A missing sknullsnodeinit in pingunhash inside the ipv4 stack can cause crashes if a disconnect is followed by another connect...

IBM Domino Web Server Cross-site Scripting Vulnerability (CVE-2015-1981)

Hello 3APA3A! Earlier I wrote about XSS vulnerability in IBM Domino http://seclists.org/fulldisclosure/2015/May/128. I informed IBM in May about it and at 17.06.2015 they fixed it and released security bulletin. Security Bulletin: IBM Domino Web Server Cross-site Scripting Vulnerability...

Samsung Galaxy S Mobile Phone Remote Code Execution Vulnerability

Samsung Galaxy is a series of mid-range and high-end smartphones from Samsung.Swiftkey keyboard is a keyboard application that comes pre-installed with system privileges on Galaxy S series phones. Samsung Galaxy S4 Mini, S4, S5, S6 series smartphones fail to validate Swiftkey language pack...

Code injection

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

CVE-2015-4640: Undefined Security Weakness

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

Samsung mobile remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Summary A remote attacker to completely have the ability to control user web traffic, the manipulation Samsung phone keyboard update mechanism, and on the target phone using the system user permission to execute code. On Samsung devices pre-installed quick keyboard cannot be disabled also cannot ...

RealTimes (Realplayer) 18.0.1.6 Privilege Escalation

RealTimes Realplayer Desktop Service Trusted Path Privilege Escalation Affected Version: 18.0.1.6 or below Vendor Homepage: http://www.real.com/?ref=cloud Vulnerability discovered by Jay Turla @shipcod3 Tested on Windows 7 Service Pack 1 Reference:...

Samsung Galaxy S phones fail to properly validate SwiftKey language pack updates

Overview Samsung Galaxy S phones, including the S4 Mini, S4, S5, and S6, fail to properly validate Swiftkey language pack updates. Description CWE-345: Insufficient Verification of Data Authenticity - CVE-2015-4640Samsung Galaxy S phones, including the S4 Mini, S4, S5, and S6, are pre-installed...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759

CVE-2015-1759 is a memory-corruption remote code execution vulnerability in Microsoft Office, specifically in the Office Compatibility Pack SP3, caused by improper handling of in-memory objects during parsing of crafted Office files. The flaw can allow an attacker to execute arbitrary code on a v...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759: Undefined Security Weakness

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1760: Undefined Security Weakness

Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Microsoft Windows Media Player Remote Code Execution Vulnerability (3033890)

This host is missing a critical security update according to Microsoft Bulletin MS15-057. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2015-1369

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack version SP3 Office 2010 version SP2 Office 2013 version SP1 Office 2013 RT version SP1 Description The issue is related to improper data handling, which can allow a remote attacker to execute arbitrary code...

PT-2015-1370

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack affected versions not specified Microsoft Office Compatibility Pack SP3 Description The issue is related to improper data handling, which can be exploited by a remote attacker to execute arbitrary code using...

DLA-231-1 dulwich - security update

Bulletin has no description...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via aioseopfunctions.php newmeta parameter. Solution Update the plugin...