9560 matches found
Description of the security update for Project Server 2013: February 13, 2018
Description of the security update for Project Server 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Description of the security update for Office 2013: February 13, 2018
Description of the security update for Office 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2013: February 13, 2018
Description of the security update for Office 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: February 13, 2018
Description of the security update for Office 2010: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the StructuredQuery remote code execution vulnerability in Windows Server 2008: February 13, 2018 Summary A remote code execution vulnerability exists in StructuredQuery when the software fails to properly handle objects in memory. To learn more about the...
Description of the security update for the Windows Kernel vulnerability in Windows Server 2008: February 13, 2018
Description of the security update for the Windows Kernel vulnerability in Windows Server 2008: February 13, 2018 Summary An information disclosure vulnerability and an elevation of privilege vulnerability exist when the Windows kernel improperly handles objects in memory. To learn more about the...
Description of the security update for the Windows remote code execution vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018
Description of the security update for the Windows remote code execution vulnerability in Windows Server 2008, WES09, and POSReady 2009: February 13, 2018 Summary A remote code execution vulnerability exists when Windows improperly handles objects in memory. To learn more about the vulnerability,...
Description of the security update for Outlook 2007: February 13, 2018
Description of the security update for Outlook 2007: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Office 2010: February 13, 2018
Description of the security update for Office 2010: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Microsoft Office CVE-2018-0853 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...
Exploit for Improper Input Validation in Debian Debian_Linux
CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4...
Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 security update
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...
Asterisk 13.17.2 - 'chan_skinny' Remote Memory Corruption
Exploit Author: Juan Sacco - http://exploitpack.com Vulnerability found using Exploit Pack v10 - Fuzzer module CVE-2017-17090 - AST-2017-013 Tested on: Asterisk 13.17.2dfsg-2 Description: Asterisk is prone to a remote unauthenticated memory exhaustion The vulnerability is due to an error when the...
Elastic Kibana X-Pack CVE-2018-3819 Open Redirect Vulnerability - Windows
Elastic Kibana with X-Pack is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Elastic Kibana X-Pack CVE-2018-3819 Open Redirect Vulnerability - Linux
Elastic Kibana with X-Pack is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-8451
With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...
CVE-2017-11482
The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website...
CVE-2017-18044
A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted...
Description of the security update for Office 2010: January 9, 2018
Description of the security update for Office 2010: January 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common...